BUG: Dentry still in use in unmount ------------[ cut here ]------------ BUG: Dentry ffff8881229f0300{i=2,n=binder-control} still in use (1) [unmount of binder binder] WARNING: fs/dcache.c:1638 at umount_check+0xaa/0x200 fs/dcache.c:1630, CPU#0: syz-executor/306 Modules linked in: CPU: 0 UID: 10999 PID: 306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 9e702740cb7b2d1af5323159e2e668f77a3c224a Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:umount_check+0x197/0x200 fs/dcache.c:1630 Code: 20 00 74 08 4c 89 ef e8 a7 74 ee ff 4d 8b 4d 00 49 81 c7 c0 03 00 00 48 8b 7d c8 48 89 de 48 8b 55 d0 48 89 d9 45 89 f0 41 57 <67> 48 0f b9 3a 48 83 c4 08 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc90001b779e8 EFLAGS: 00010286 RAX: 1ffffffff0f86468 RBX: ffff8881229f0300 RCX: ffff8881229f0300 RDX: 0000000000000002 RSI: ffff8881229f0300 RDI: ffffffff87edb400 RBP: ffffc90001b77a28 R08: 0000000000000001 R09: ffffffff8688e0c0 R10: 0000000000000000 R11: ffffffff8214e6d0 R12: dffffc0000000000 R13: ffffffff87c32340 R14: 0000000000000001 R15: ffff888100bc53c0 FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb871c16088 CR3: 00000000074ae000 CR4: 00000000003526b0 Call Trace: d_walk+0x2b9/0x4f0 fs/dcache.c:1345 do_one_tree+0x2e/0x90 fs/dcache.c:1645 shrink_dcache_for_umount+0x92/0x140 fs/dcache.c:1661 generic_shutdown_super+0x6a/0x300 fs/super.c:621 kill_anon_super+0x4b/0x1d0 fs/super.c:1289 binderfs_kill_super+0x45/0x60 drivers/android/binder/rust_binderfs.c:750 deactivate_locked_super+0xd0/0x2b0 fs/super.c:474 deactivate_super+0xb8/0xe0 fs/super.c:507 cleanup_mnt+0x49e/0x530 fs/namespace.c:1318 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1325 task_work_run+0x1e7/0x260 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x7aa/0x2170 kernel/exit.c:971 do_group_exit+0x214/0x2e0 kernel/exit.c:1112 __do_sys_exit_group kernel/exit.c:1123 [inline] __se_sys_exit_group kernel/exit.c:1121 [inline] __x64_sys_exit_group+0x43/0x50 kernel/exit.c:1121 x64_sys_call+0x2fec/0x3000 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x61/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fb87199acb9 Code: Unable to access opcode bytes at 0x7fb87199ac8f. RSP: 002b:00007fff951e8878 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb87199acb9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 RBP: 00007fb871a06501 R08: 0000000000000000 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 R13: 0000000000000002 R14: 00007fff951e8e08 R15: 0000000000000000 ---[ end trace 0000000000000000 ]--- VFS: Busy inodes after unmount of binder (binder) ------------[ cut here ]------------ kernel BUG at fs/super.c:653! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 10999 PID: 306 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT 9e702740cb7b2d1af5323159e2e668f77a3c224a Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:generic_shutdown_super+0x2f6/0x300 fs/super.c:651 Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 a0 7e 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffc90001b77af8 EFLAGS: 00010246 RAX: 0000000000000031 RBX: ffff888100bc53c0 RCX: 85e58125b153fd00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 RBP: ffffc90001b77b20 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000 R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff11020178a8d FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb871c16088 CR3: 00000000074ae000 CR4: 00000000003526b0 Call Trace: kill_anon_super+0x4b/0x1d0 fs/super.c:1289 binderfs_kill_super+0x45/0x60 drivers/android/binder/rust_binderfs.c:750 deactivate_locked_super+0xd0/0x2b0 fs/super.c:474 deactivate_super+0xb8/0xe0 fs/super.c:507 cleanup_mnt+0x49e/0x530 fs/namespace.c:1318 __cleanup_mnt+0x1d/0x40 fs/namespace.c:1325 task_work_run+0x1e7/0x260 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x7aa/0x2170 kernel/exit.c:971 do_group_exit+0x214/0x2e0 kernel/exit.c:1112 __do_sys_exit_group kernel/exit.c:1123 [inline] __se_sys_exit_group kernel/exit.c:1121 [inline] __x64_sys_exit_group+0x43/0x50 kernel/exit.c:1121 x64_sys_call+0x2fec/0x3000 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x61/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fb87199acb9 Code: Unable to access opcode bytes at 0x7fb87199ac8f. RSP: 002b:00007fff951e8878 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb87199acb9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 RBP: 00007fb871a06501 R08: 0000000000000000 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 R13: 0000000000000002 R14: 00007fff951e8e08 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:generic_shutdown_super+0x2f6/0x300 fs/super.c:651 Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 a0 7e 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffc90001b77af8 EFLAGS: 00010246 RAX: 0000000000000031 RBX: ffff888100bc53c0 RCX: 85e58125b153fd00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 RBP: ffffc90001b77b20 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000 R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff11020178a8d FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb871c16088 CR3: 00000000074ae000 CR4: 00000000003526b0 ---------------- Code disassembly (best guess): 0: 20 00 and %al,(%rax) 2: 74 08 je 0xc 4: 4c 89 ef mov %r13,%rdi 7: e8 a7 74 ee ff call 0xffee74b3 c: 4d 8b 4d 00 mov 0x0(%r13),%r9 10: 49 81 c7 c0 03 00 00 add $0x3c0,%r15 17: 48 8b 7d c8 mov -0x38(%rbp),%rdi 1b: 48 89 de mov %rbx,%rsi 1e: 48 8b 55 d0 mov -0x30(%rbp),%rdx 22: 48 89 d9 mov %rbx,%rcx 25: 45 89 f0 mov %r14d,%r8d 28: 41 57 push %r15 * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 48 83 c4 08 add $0x8,%rsp 33: 31 c0 xor %eax,%eax 35: 48 83 c4 10 add $0x10,%rsp 39: 5b pop %rbx 3a: 41 5c pop %r12 3c: 41 5d pop %r13 3e: 41 5e pop %r14 Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. 2026/01/23 00:36:27 parsed 1 programs [ 28.641117][ T36] audit: type=1400 audit(1769128587.390:61): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 30.080295][ T36] audit: type=1400 audit(1769128588.830:62): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.104427][ T36] audit: type=1400 audit(1769128588.860:63): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.106834][ T302] cgroup: Unknown subsys name 'net' [ 30.134972][ T36] audit: type=1400 audit(1769128588.890:64): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.135501][ T302] cgroup: Unknown subsys name 'devices' [ 30.325448][ T302] cgroup: Unknown subsys name 'hugetlb' [ 30.331221][ T302] cgroup: Unknown subsys name 'rlimit' [ 30.455121][ T302] cpuset.memory_pressure_enabled is deprecated, use memory.pressure with CONFIG_PSI instead [ 30.482737][ T36] audit: type=1400 audit(1769128589.230:65): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.506991][ T36] audit: type=1400 audit(1769128589.240:66): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.528363][ T36] audit: type=1400 audit(1769128589.240:67): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.549963][ T36] audit: type=1400 audit(1769128589.240:68): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.571489][ T36] audit: type=1400 audit(1769128589.240:69): avc: denied { sys_module } for pid=302 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 30.575675][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.593678][ T36] audit: type=1400 audit(1769128589.240:70): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.683438][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.549854][ T306] ------------[ cut here ]------------ [ 31.555863][ T306] BUG: Dentry ffff8881229f0300{i=2,n=binder-control} still in use (1) [unmount of binder binder] [ 31.566820][ T306] WARNING: fs/dcache.c:1638 at umount_check+0xaa/0x200, CPU#0: syz-executor/306 [ 31.576271][ T306] Modules linked in: [ 31.580319][ T306] CPU: 0 UID: 10999 PID: 306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 9e702740cb7b2d1af5323159e2e668f77a3c224a [ 31.593434][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.603587][ T306] RIP: 0010:umount_check+0x197/0x200 [ 31.609286][ T306] Code: 20 00 74 08 4c 89 ef e8 a7 74 ee ff 4d 8b 4d 00 49 81 c7 c0 03 00 00 48 8b 7d c8 48 89 de 48 8b 55 d0 48 89 d9 45 89 f0 41 57 <67> 48 0f b9 3a 48 83 c4 08 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 31.630379][ T306] RSP: 0018:ffffc90001b779e8 EFLAGS: 00010286 [ 31.636893][ T306] RAX: 1ffffffff0f86468 RBX: ffff8881229f0300 RCX: ffff8881229f0300 [ 31.645191][ T306] RDX: 0000000000000002 RSI: ffff8881229f0300 RDI: ffffffff87edb400 [ 31.653321][ T306] RBP: ffffc90001b77a28 R08: 0000000000000001 R09: ffffffff8688e0c0 [ 31.661633][ T306] R10: 0000000000000000 R11: ffffffff8214e6d0 R12: dffffc0000000000 [ 31.670319][ T306] R13: ffffffff87c32340 R14: 0000000000000001 R15: ffff888100bc53c0 [ 31.678725][ T306] FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000 [ 31.688178][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.695070][ T306] CR2: 00007fb871c16088 CR3: 00000000074ae000 CR4: 00000000003526b0 [ 31.704261][ T306] Call Trace: [ 31.708081][ T306] [ 31.711403][ T306] d_walk+0x2b9/0x4f0 [ 31.715726][ T306] ? __cfi_umount_check+0x10/0x10 [ 31.721091][ T306] do_one_tree+0x2e/0x90 [ 31.725552][ T306] shrink_dcache_for_umount+0x92/0x140 [ 31.731146][ T306] generic_shutdown_super+0x6a/0x300 [ 31.736859][ T306] kill_anon_super+0x4b/0x1d0 [ 31.741678][ T306] binderfs_kill_super+0x45/0x60 [ 31.747248][ T306] deactivate_locked_super+0xd0/0x2b0 [ 31.752770][ T306] deactivate_super+0xb8/0xe0 [ 31.757718][ T306] cleanup_mnt+0x49e/0x530 [ 31.762449][ T306] __cleanup_mnt+0x1d/0x40 [ 31.767038][ T306] task_work_run+0x1e7/0x260 [ 31.771789][ T306] ? __cfi_task_work_run+0x10/0x10 [ 31.777083][ T306] ? nsproxy_free+0x2aa/0x300 [ 31.781990][ T306] ? switch_task_namespaces+0xbb/0x100 [ 31.787802][ T306] do_exit+0x7aa/0x2170 [ 31.792096][ T306] ? __cfi_do_exit+0x10/0x10 [ 31.796938][ T306] ? __kasan_check_write+0x18/0x20 [ 31.802185][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.807989][ T306] ? __kasan_check_write+0x18/0x20 [ 31.813183][ T306] ? zap_other_threads+0x334/0x370 [ 31.818427][ T306] do_group_exit+0x214/0x2e0 [ 31.823316][ T306] __x64_sys_exit_group+0x43/0x50 [ 31.828480][ T306] x64_sys_call+0x2fec/0x3000 [ 31.833533][ T306] do_syscall_64+0x61/0xf80 [ 31.838522][ T306] ? clear_bhb_loop+0x50/0xa0 [ 31.843496][ T306] ? clear_bhb_loop+0x50/0xa0 [ 31.848313][ T306] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.854458][ T306] RIP: 0033:0x7fb87199acb9 [ 31.859451][ T306] Code: Unable to access opcode bytes at 0x7fb87199ac8f. [ 31.867106][ T306] RSP: 002b:00007fff951e8878 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.876051][ T306] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb87199acb9 [ 31.884456][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 31.892631][ T306] RBP: 00007fb871a06501 R08: 0000000000000000 R09: 0000000000000002 [ 31.900997][ T306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 31.909314][ T306] R13: 0000000000000002 R14: 00007fff951e8e08 R15: 0000000000000000 [ 31.917644][ T306] [ 31.920748][ T306] ---[ end trace 0000000000000000 ]--- [ 31.926804][ T306] VFS: Busy inodes after unmount of binder (binder) [ 31.926934][ T306] ------------[ cut here ]------------ [ 31.939245][ T306] kernel BUG at fs/super.c:653! [ 31.944543][ T306] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 31.951009][ T306] CPU: 0 UID: 10999 PID: 306 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT 9e702740cb7b2d1af5323159e2e668f77a3c224a [ 31.965466][ T306] Tainted: [W]=WARN [ 31.969586][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.980317][ T306] RIP: 0010:generic_shutdown_super+0x2f6/0x300 [ 31.986932][ T306] Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 a0 7e 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90 [ 32.007252][ T306] RSP: 0018:ffffc90001b77af8 EFLAGS: 00010246 [ 32.013709][ T306] RAX: 0000000000000031 RBX: ffff888100bc53c0 RCX: 85e58125b153fd00 [ 32.021971][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 32.030488][ T306] RBP: ffffc90001b77b20 R08: 0000000000000003 R09: 0000000000000004 [ 32.038503][ T306] R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000 [ 32.046842][ T306] R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff11020178a8d [ 32.055072][ T306] FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000 [ 32.064623][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.071659][ T306] CR2: 00007fb871c16088 CR3: 00000000074ae000 CR4: 00000000003526b0 [ 32.079918][ T306] Call Trace: [ 32.083513][ T306] [ 32.086543][ T306] kill_anon_super+0x4b/0x1d0 [ 32.091417][ T306] binderfs_kill_super+0x45/0x60 [ 32.096817][ T306] deactivate_locked_super+0xd0/0x2b0 [ 32.102231][ T306] deactivate_super+0xb8/0xe0 [ 32.107133][ T306] cleanup_mnt+0x49e/0x530 [ 32.112211][ T306] __cleanup_mnt+0x1d/0x40 [ 32.116948][ T306] task_work_run+0x1e7/0x260 [ 32.121844][ T306] ? __cfi_task_work_run+0x10/0x10 [ 32.127088][ T306] ? nsproxy_free+0x2aa/0x300 [ 32.132175][ T306] ? switch_task_namespaces+0xbb/0x100 [ 32.137926][ T306] do_exit+0x7aa/0x2170 [ 32.142368][ T306] ? __cfi_do_exit+0x10/0x10 [ 32.147148][ T306] ? __kasan_check_write+0x18/0x20 [ 32.152620][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.158803][ T306] ? __kasan_check_write+0x18/0x20 [ 32.164363][ T306] ? zap_other_threads+0x334/0x370 [ 32.169512][ T306] do_group_exit+0x214/0x2e0 [ 32.174206][ T306] __x64_sys_exit_group+0x43/0x50 [ 32.180037][ T306] x64_sys_call+0x2fec/0x3000 [ 32.184896][ T306] do_syscall_64+0x61/0xf80 [ 32.189411][ T306] ? clear_bhb_loop+0x50/0xa0 [ 32.194353][ T306] ? clear_bhb_loop+0x50/0xa0 [ 32.199416][ T306] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.205517][ T306] RIP: 0033:0x7fb87199acb9 [ 32.210037][ T306] Code: Unable to access opcode bytes at 0x7fb87199ac8f. [ 32.217236][ T306] RSP: 002b:00007fff951e8878 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.226200][ T306] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb87199acb9 [ 32.234535][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 32.242787][ T306] RBP: 00007fb871a06501 R08: 0000000000000000 R09: 0000000000000002 [ 32.251045][ T306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 32.259286][ T306] R13: 0000000000000002 R14: 00007fff951e8e08 R15: 0000000000000000 [ 32.267857][ T306] [ 32.270974][ T306] Modules linked in: [ 32.275440][ T306] ---[ end trace 0000000000000000 ]--- [ 32.281201][ T306] RIP: 0010:generic_shutdown_super+0x2f6/0x300 [ 32.287656][ T306] Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 a0 7e 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90 [ 32.308740][ T306] RSP: 0018:ffffc90001b77af8 EFLAGS: 00010246 [ 32.315346][ T306] RAX: 0000000000000031 RBX: ffff888100bc53c0 RCX: 85e58125b153fd00 [ 32.323644][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 32.332307][ T306] RBP: ffffc90001b77b20 R08: 0000000000000003 R09: 0000000000000004 [ 32.340941][ T306] R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000 [ 32.349254][ T306] R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff11020178a8d [ 32.357850][ T306] FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000 [ 32.367253][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.374422][ T306] CR2: 00007fb871c16088 CR3: 00000000074ae000 CR4: 00000000003526b0 [ 32.382739][ T306] Kernel panic - not syncing: Fatal exception [ 32.389755][ T306] Kernel Offset: disabled [ 32.394111][ T306] Rebooting in 86400 seconds.. syzkaller build log: go env (err=) AR='ar' CC='gcc' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_ENABLED='1' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' CXX='g++' GCCGO='gccgo' GO111MODULE='auto' GOAMD64='v1' GOARCH='amd64' GOAUTH='netrc' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOCACHEPROG='' GODEBUG='' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFIPS140='off' GOFLAGS='' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2251510016=/tmp/go-build -gno-record-gcc-switches' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod' GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs-2/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTELEMETRY='local' GOTELEMETRYDIR='/syzkaller/.config/go/telemetry' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.24.4' GOWORK='' PKG_CONFIG='pkg-config' git status (err=) HEAD detached at 82c9c083a7 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=82c9c083a75aa76345d19c3fc2c0dea5dee268df -X github.com/google/syzkaller/prog.gitRevisionDate=20260122-125305" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=82c9c083a75aa76345d19c3fc2c0dea5dee268df -X github.com/google/syzkaller/prog.gitRevisionDate=20260122-125305" ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=82c9c083a75aa76345d19c3fc2c0dea5dee268df -X github.com/google/syzkaller/prog.gitRevisionDate=20260122-125305" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_amd64 g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"82c9c083a75aa76345d19c3fc2c0dea5dee268df\" /usr/bin/ld: /tmp/ccOzoMMX.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x386): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking ./tools/check-syzos.sh 2>/dev/null