Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. 2025/06/19 12:47:04 ignoring optional flag "sandboxArg"="0" 2025/06/19 12:47:05 parsed 1 programs [ 54.123138][ T36] audit: type=1400 audit(1750337227.280:106): avc: denied { unlink } for pid=391 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.191349][ T391] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.136676][ T36] audit: type=1400 audit(1750337228.290:107): avc: denied { create } for pid=401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.306089][ T36] audit: type=1401 audit(1750337228.460:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 55.558784][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.566129][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.573398][ T426] bridge_slave_0: entered allmulticast mode [ 55.579754][ T426] bridge_slave_0: entered promiscuous mode [ 55.586523][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.593709][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.600917][ T426] bridge_slave_1: entered allmulticast mode [ 55.608235][ T426] bridge_slave_1: entered promiscuous mode [ 55.682932][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.690012][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.697385][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.704523][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.726337][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.734890][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.745792][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.752893][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.763236][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.770412][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.796438][ T426] veth0_vlan: entered promiscuous mode [ 55.808222][ T426] veth1_macvtap: entered promiscuous mode [ 55.862209][ T13] bridge_slave_1: left allmulticast mode [ 55.867961][ T13] bridge_slave_1: left promiscuous mode [ 55.873774][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.882031][ T13] bridge_slave_0: left allmulticast mode [ 55.887796][ T13] bridge_slave_0: left promiscuous mode [ 55.893577][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.052384][ T13] veth1_macvtap: left promiscuous mode [ 56.057978][ T13] veth0_vlan: left promiscuous mode 2025/06/19 12:47:09 executed programs: 0 [ 56.602322][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.609753][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.616999][ T452] bridge_slave_0: entered allmulticast mode [ 56.623451][ T452] bridge_slave_0: entered promiscuous mode [ 56.629824][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.637035][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.644185][ T452] bridge_slave_1: entered allmulticast mode [ 56.650743][ T452] bridge_slave_1: entered promiscuous mode [ 56.701842][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.708908][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.716253][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.723327][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.744941][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.753006][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.762712][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.769779][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.779418][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.786687][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.811528][ T452] veth0_vlan: entered promiscuous mode [ 56.822668][ T452] veth1_macvtap: entered promiscuous mode [ 56.850993][ T36] audit: type=1400 audit(1750337230.010:109): avc: denied { read } for pid=456 comm="syz.2.16" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.873889][ T36] audit: type=1400 audit(1750337230.010:110): avc: denied { open } for pid=456 comm="syz.2.16" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.876661][ T457] ------------[ cut here ]------------ [ 56.898746][ T36] audit: type=1400 audit(1750337230.030:111): avc: denied { ioctl } for pid=456 comm="syz.2.16" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.903759][ T457] RUST PANIC: CPU: 0 PID: 457 at drivers/android/binder/node.rs:877 [ 56.928806][ T36] audit: type=1400 audit(1750337230.030:112): avc: denied { set_context_mgr } for pid=456 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 56.936590][ T457] ------------[ cut here ]------------ [ 56.936604][ T457] RUST PANIC: CPU: 0 PID: 457 at /usr/local/rustup/toolchains/1.87.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/panicking.rs:218 [ 56.936632][ T457] ================================================================== [ 56.936649][ T457] BUG: KASAN: global-out-of-bounds in _RNvNtCs9jEwPDbx20M_4core3fmt5write+0x62e/0xaa0 [ 56.936708][ T457] Read of size 4 at addr ffffffff8734c198 by task syz.2.16/457 [ 56.936728][ T457] [ 56.936743][ T457] CPU: 0 UID: 0 PID: 457 Comm: syz.2.16 Not tainted 6.12.23-syzkaller-08445-g72ccaf358b3b-dirty #0 fe30249007f871a59a121e0ae995cc07bf3813bd [ 56.936773][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.936798][ T457] Call Trace: [ 56.936808][ T457] [ 56.936818][ T457] __dump_stack+0x21/0x30 [ 56.936848][ T457] dump_stack_lvl+0x7b/0x190 [ 56.936875][ T457] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.936903][ T457] ? __cfi__printk+0x10/0x10 [ 56.936937][ T457] print_address_description+0x71/0x220 [ 56.936962][ T457] print_report+0x4a/0x70 [ 56.936983][ T457] kasan_report+0x163/0x1a0 [ 56.937018][ T457] ? _RNvNtCs9jEwPDbx20M_4core3fmt5write+0x62e/0xaa0 [ 56.937054][ T457] ? _RNvXsc_NtCs43vyB533jt3_6kernel3strNtB5_12RawFormatterNtNtCs9jEwPDbx20M_4core3fmt5Write9write_str+0x15c/0x1a0 [ 56.937103][ T457] ? _RNvNtCs9jEwPDbx20M_4core3fmt5write+0x62e/0xaa0 [ 56.937146][ T457] __asan_report_load4_noabort+0x18/0x20 [ 56.937173][ T457] _RNvNtCs9jEwPDbx20M_4core3fmt5write+0x62e/0xaa0 [ 56.937210][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core3fmt5write+0x10/0x10 [ 56.937254][ T457] rust_fmt_argument+0x107/0x1a0 [ 56.937287][ T457] ? __cfi_rust_fmt_argument+0x10/0x10 [ 56.937321][ T457] ? record_print_text+0x2f7/0x430 [ 56.937358][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.937391][ T457] pointer+0x74e/0xdd0 [ 56.937416][ T457] ? down_trylock+0x56/0xc0 [ 56.937440][ T457] ? __printk_safe_exit+0xd/0x20 [ 56.937465][ T457] ? console_trylock+0x15d/0x210 [ 56.937497][ T457] ? string+0x2c0/0x2c0 [ 56.937524][ T457] ? format_decode+0x8c0/0x1600 [ 56.937553][ T457] vsnprintf+0xc7b/0x1aa0 [ 56.937583][ T457] vscnprintf+0x45/0x90 [ 56.937610][ T457] panic+0x193/0x700 [ 56.937642][ T457] ? __cfi_panic+0x10/0x10 [ 56.937672][ T457] ? printk_percpu_data_ready+0xd/0x20 [ 56.937704][ T457] rust_panic+0xc0/0xf0 [ 56.937734][ T457] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x175/0x1c0 [ 56.937768][ T457] ? record_print_text+0x26e/0x430 [ 56.937802][ T457] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 56.937835][ T457] ? record_print_text+0x2f7/0x430 [ 56.937871][ T457] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 56.937910][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 56.937948][ T457] ? __kasan_check_write+0x18/0x20 [ 56.937975][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.938005][ T457] ? prb_read_valid+0x41/0x80 [ 56.938033][ T457] ? wq_watchdog_touch+0x104/0x190 [ 56.938064][ T457] ? io_serial_out+0x5c/0xd0 [ 56.938092][ T457] _RNvNtCs9jEwPDbx20M_4core9panicking14panic_nounwind+0xa7/0xb0 [ 56.938138][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking14panic_nounwind+0x10/0x10 [ 56.938178][ T457] _RNvNtCs9jEwPDbx20M_4core3fmt5write+0xa87/0xaa0 [ 56.938214][ T457] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 56.938238][ T457] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 56.938274][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core3fmt5write+0x10/0x10 [ 56.938310][ T457] ? console_flush_all+0x6fb/0xaa0 [ 56.938344][ T457] ? console_flush_all+0x9fa/0xaa0 [ 56.938379][ T457] rust_fmt_argument+0x107/0x1a0 [ 56.938412][ T457] ? __cfi_rust_fmt_argument+0x10/0x10 [ 56.938446][ T457] ? __kasan_check_write+0x18/0x20 [ 56.938473][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.938501][ T457] ? __console_rewind_all+0x170/0x170 [ 56.938537][ T457] ? __kasan_check_read+0x15/0x20 [ 56.938562][ T457] ? is_printk_cpu_sync_owner+0x39/0x50 [ 56.938587][ T457] ? is_printk_legacy_deferred+0x5c/0x70 [ 56.938615][ T457] pointer+0x74e/0xdd0 [ 56.938640][ T457] ? __cfi_console_unlock+0x10/0x10 [ 56.938673][ T457] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 56.938707][ T457] ? string+0x2c0/0x2c0 [ 56.938733][ T457] ? format_decode+0x8c0/0x1600 [ 56.938762][ T457] vsnprintf+0xc7b/0x1aa0 [ 56.938791][ T457] vscnprintf+0x45/0x90 [ 56.938818][ T457] panic+0x193/0x700 [ 56.938848][ T457] ? __cfi_panic+0x10/0x10 [ 56.938877][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x1d50/0x21e0 [ 56.938913][ T457] ? printk_percpu_data_ready+0xd/0x20 [ 56.938947][ T457] rust_panic+0xc0/0xf0 [ 56.938977][ T457] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x175/0x1c0 [ 56.939008][ T457] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 56.939052][ T457] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 56.939084][ T457] ? __kasan_check_write+0x18/0x20 [ 56.939110][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.939144][ T457] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.939174][ T457] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 56.939211][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 56.939249][ T457] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 56.939283][ T457] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 56.939317][ T457] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 56.939352][ T457] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 56.939387][ T457] ? __kasan_check_read+0x15/0x20 [ 56.939414][ T457] ? check_new_pages+0x196/0x370 [ 56.939442][ T457] ? __kasan_check_write+0x18/0x20 [ 56.939471][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.939500][ T457] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.939532][ T457] ? __kasan_check_write+0x18/0x20 [ 56.939559][ T457] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 56.939606][ T457] ? __set_page_owner+0x3bf/0x5d0 [ 56.939642][ T457] ? __cfi___set_page_owner+0x10/0x10 [ 56.939678][ T457] ? kasan_unpoison+0x4a/0x70 [ 56.939705][ T457] ? __cfi_post_alloc_hook+0x10/0x10 [ 56.939738][ T457] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 56.939766][ T457] ? _raw_spin_trylock+0xaf/0x130 [ 56.939795][ T457] ? __cfi__raw_spin_trylock+0x10/0x10 [ 56.939831][ T457] ? is_bpf_text_address+0x17b/0x1a0 [ 56.939865][ T457] ? kernel_text_address+0xa9/0xe0 [ 56.939890][ T457] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 56.939925][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.939954][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.939987][ T457] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.940018][ T457] ? stack_depot_save_flags+0x399/0x800 [ 56.940048][ T457] ? kasan_save_track+0x4f/0x80 [ 56.940077][ T457] ? kasan_save_track+0x3e/0x80 [ 56.940106][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.940139][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.940169][ T457] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 56.940203][ T457] ? __set_page_owner+0x294/0x5d0 [ 56.940237][ T457] ? post_alloc_hook+0x3b9/0x3f0 [ 56.940270][ T457] ? prep_new_page+0x1c/0x120 [ 56.940303][ T457] ? get_page_from_freelist+0x46bb/0x4750 [ 56.940326][ T457] ? __alloc_pages_noprof+0x30d/0x6c0 [ 56.940349][ T457] ? stack_depot_save_flags+0x672/0x800 [ 56.940375][ T457] ? kasan_save_track+0x4f/0x80 [ 56.940404][ T457] ? kasan_save_free_info+0x4a/0x60 [ 56.940428][ T457] ? __kasan_slab_free+0x5f/0x80 [ 56.940458][ T457] ? kfree+0x156/0x400 [ 56.940483][ T457] ? avc_audit_post_callback+0x2fd/0x780 [ 56.940506][ T457] ? common_lsm_audit+0x147a/0x1860 [ 56.940531][ T457] ? slow_avc_audit+0x18d/0x1f0 [ 56.940552][ T457] ? avc_has_perm+0x1cd/0x220 [ 56.940574][ T457] ? selinux_binder_set_context_mgr+0xcf/0x110 [ 56.940601][ T457] ? security_binder_set_context_mgr+0x44/0xb0 [ 56.940626][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process14set_as_manager+0x3b8/0xa60 [ 56.940657][ T457] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x135a/0x2c20 [ 56.940687][ T457] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 56.940721][ T457] ? __se_sys_ioctl+0x132/0x1b0 [ 56.940753][ T457] ? __x64_sys_ioctl+0x7f/0xa0 [ 56.940785][ T457] ? x64_sys_call+0x1878/0x2ee0 [ 56.940815][ T457] ? do_syscall_64+0x58/0xf0 [ 56.940845][ T457] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.940884][ T457] ? __kasan_check_write+0x18/0x20 [ 56.940912][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.940941][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.940973][ T457] ? __set_page_owner+0x294/0x5d0 [ 56.941017][ T457] ? is_bpf_text_address+0x17b/0x1a0 [ 56.941051][ T457] ? kernel_text_address+0xa9/0xe0 [ 56.941075][ T457] ? __kasan_check_write+0x18/0x20 [ 56.941101][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.941141][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.941176][ T457] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.941206][ T457] ? stack_depot_save_flags+0x399/0x800 [ 56.941235][ T457] ? kasan_save_track+0x4f/0x80 [ 56.941266][ T457] ? kasan_save_track+0x3e/0x80 [ 56.941295][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.941318][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.941348][ T457] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 56.941376][ T457] ? __set_page_owner+0x294/0x5d0 [ 56.941408][ T457] ? post_alloc_hook+0x3b9/0x3f0 [ 56.941443][ T457] ? prep_new_page+0x1c/0x120 [ 56.941476][ T457] ? get_page_from_freelist+0x46bb/0x4750 [ 56.941501][ T457] ? __alloc_pages_noprof+0x30d/0x6c0 [ 56.941523][ T457] ? alloc_slab_page+0x6b/0x1f0 [ 56.941553][ T457] ? allocate_slab+0x69/0x450 [ 56.941585][ T457] ? ___slab_alloc+0x59a/0x8b0 [ 56.941614][ T457] ? __kmalloc_node_track_caller_noprof+0x23a/0x440 [ 56.941643][ T457] ? krealloc_noprof+0x8d/0x130 [ 56.941672][ T457] ? rust_helper_krealloc+0x33/0xd0 [ 56.941696][ T457] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 56.941731][ T457] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_open+0x202/0x11e0 [ 56.941763][ T457] ? do_dentry_open+0x978/0x1510 [ 56.941798][ T457] ? vfs_open+0x86/0x230 [ 56.941817][ T457] ? path_openat+0x2b6c/0x34b0 [ 56.941850][ T457] ? do_filp_open+0x1c6/0x3e0 [ 56.941883][ T457] ? do_sys_openat2+0x12c/0x1c0 [ 56.941905][ T457] ? __x64_sys_openat+0x13a/0x170 [ 56.941928][ T457] ? x64_sys_call+0xe69/0x2ee0 [ 56.941958][ T457] ? do_syscall_64+0x58/0xf0 [ 56.941986][ T457] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.942031][ T457] ? is_bpf_text_address+0x17b/0x1a0 [ 56.942064][ T457] ? kernel_text_address+0xa9/0xe0 [ 56.942089][ T457] ? __kasan_check_write+0x18/0x20 [ 56.942113][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.942150][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.942184][ T457] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.942214][ T457] ? stack_depot_save_flags+0x399/0x800 [ 56.942244][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.942270][ T457] ? kasan_save_track+0x4f/0x80 [ 56.942299][ T457] ? kasan_save_track+0x3e/0x80 [ 56.942330][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.942354][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.942383][ T457] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 56.942412][ T457] ? krealloc_noprof+0x8d/0x130 [ 56.942440][ T457] ? rust_helper_krealloc+0x33/0xd0 [ 56.942464][ T457] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 56.942498][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 56.942529][ T457] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 56.942560][ T457] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 56.942593][ T457] ? __se_sys_ioctl+0x132/0x1b0 [ 56.942625][ T457] ? __x64_sys_ioctl+0x7f/0xa0 [ 56.942656][ T457] ? do_syscall_64+0x58/0xf0 [ 56.942684][ T457] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.942723][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.942754][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.942778][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.942809][ T457] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 56.942841][ T457] ? __kasan_check_write+0x18/0x20 [ 56.942866][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.942894][ T457] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.942923][ T457] ? cgroup_rstat_updated+0x132/0x7f0 [ 56.942951][ T457] ? _raw_spin_unlock+0x45/0x60 [ 56.942980][ T457] ? rust_helper_spin_unlock+0x19/0x30 [ 56.943005][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 56.943040][ T457] ? detach_entity_load_avg+0x7b0/0x7b0 [ 56.943072][ T457] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 56.943105][ T457] ? xfd_validate_state+0x68/0x150 [ 56.943139][ T457] ? save_fpregs_to_fpstate+0x196/0x230 [ 56.943175][ T457] ? __kasan_check_write+0x18/0x20 [ 56.943201][ T457] ? __switch_to+0xc7b/0x1310 [ 56.943231][ T457] ? pick_next_task_fair+0x870/0x900 [ 56.943256][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.943285][ T457] ? _raw_spin_unlock+0x45/0x60 [ 56.943314][ T457] ? finish_task_switch+0x13a/0x780 [ 56.943337][ T457] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 56.943369][ T457] ? __schedule+0x1463/0x1f10 [ 56.943402][ T457] ? avc_has_extended_perms+0x7c7/0xdd0 [ 56.943426][ T457] ? __asan_memcpy+0x5a/0x80 [ 56.943453][ T457] ? avc_has_extended_perms+0x921/0xdd0 [ 56.943484][ T457] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 56.943517][ T457] ? do_vfs_ioctl+0xeda/0x1e30 [ 56.943550][ T457] ? preempt_schedule_common+0x2d/0x60 [ 56.943583][ T457] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 56.943618][ T457] ? __cfi_preempt_schedule+0x10/0x10 [ 56.943654][ T457] ? preempt_schedule_thunk+0x1a/0x40 [ 56.943690][ T457] ? try_to_wake_up+0xe17/0x1aa0 [ 56.943727][ T457] ? ioctl_has_perm+0x384/0x4d0 [ 56.943761][ T457] ? has_cap_mac_admin+0xd0/0xd0 [ 56.943793][ T457] ? futex_wake+0x63a/0x900 [ 56.943817][ T457] ? __cfi_futex_wake+0x10/0x10 [ 56.943839][ T457] ? selinux_file_ioctl+0x6e0/0x1360 [ 56.943873][ T457] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 56.943906][ T457] ? do_futex+0x356/0x500 [ 56.943939][ T457] ? __cfi_do_futex+0x10/0x10 [ 56.943972][ T457] ? __fget_files+0x2c5/0x340 [ 56.944005][ T457] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 56.944038][ T457] ? __se_sys_ioctl+0x114/0x1b0 [ 56.944069][ T457] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 56.944104][ T457] __se_sys_ioctl+0x132/0x1b0 [ 56.944144][ T457] __x64_sys_ioctl+0x7f/0xa0 [ 56.944175][ T457] x64_sys_call+0x1878/0x2ee0 [ 56.944206][ T457] do_syscall_64+0x58/0xf0 [ 56.944235][ T457] ? clear_bhb_loop+0x35/0x90 [ 56.944267][ T457] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.944301][ T457] RIP: 0033:0x7f76b178e929 [ 56.944331][ T457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.944352][ T457] RSP: 002b:00007f76b2655038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.944383][ T457] RAX: ffffffffffffffda RBX: 00007f76b19b5fa0 RCX: 00007f76b178e929 [ 56.944402][ T457] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 56.944419][ T457] RBP: 00007f76b1810b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.944436][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.944450][ T457] R13: 0000000000000000 R14: 00007f76b19b5fa0 R15: 00007fffe3131af8 [ 56.944470][ T457] [ 56.944479][ T457] [ 56.944485][ T457] The buggy address belongs to the variable: [ 56.944494][ T457] printk_rb_static+0x58/0x80 [ 56.944526][ T457] [ 56.944532][ T457] The buggy address belongs to the physical page: [ 56.944549][ T457] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x734c [ 56.944576][ T457] flags: 0x4000(reserved|zone=0) [ 56.944609][ T457] raw: 0000000000004000 ffffea00001cd308 ffffea00001cd308 0000000000000000 [ 56.944629][ T457] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 56.944641][ T457] page dumped because: kasan: bad access detected [ 56.944658][ T457] page_owner info is not present (never set?) [ 56.944667][ T457] [ 56.944673][ T457] Memory state around the buggy address: [ 56.944686][ T457] ffffffff8734c080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 56.944702][ T457] ffffffff8734c100: f9 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 56.944717][ T457] >ffffffff8734c180: 00 00 00 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 56.944730][ T457] ^ [ 56.944742][ T457] ffffffff8734c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.944758][ T457] ffffffff8734c280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.944770][ T457] ================================================================== [ 56.944780][ T457] Disabling lock debugging due to kernel taint [ 56.944807][ T457] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 56.944819][ T457] BUG: unable to handle page fault for address: ffffc900010bd490 [ 56.944831][ T457] #PF: supervisor instruction fetch in kernel mode [ 56.944845][ T457] #PF: error_code(0x0011) - permissions violation [ 56.944857][ T457] PGD 100000067 P4D 100000067 PUD 101656067 PMD 11dd96067 PTE 8000000115aca063 [ 56.944902][ T457] Oops: Oops: 0011 [#1] PREEMPT SMP KASAN PTI [ 56.944928][ T457] CPU: 0 UID: 0 PID: 457 Comm: syz.2.16 Tainted: G B 6.12.23-syzkaller-08445-g72ccaf358b3b-dirty #0 fe30249007f871a59a121e0ae995cc07bf3813bd [ 56.944963][ T457] Tainted: [B]=BAD_PAGE [ 56.944972][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.944986][ T457] RIP: 0010:0xffffc900010bd490 [ 56.945006][ T457] Code: ff ff e8 d6 0b 01 00 c9 ff ff d4 7a 21 00 20 f9 ff 1f 00 00 00 00 00 fc ff df f6 94 ed 86 ff ff ff ff 10 d7 0b 01 00 c9 ff ff <50> d5 0b 01 00 c9 ff ff 07 4f 06 81 ff ff ff ff 20 ac 97 88 ff ff [ 56.945025][ T457] RSP: 0018:ffffc900010bcd18 EFLAGS: 00010046 [ 56.945047][ T457] RAX: 1ffff92000217a8b RBX: 0000000000000000 RCX: dffffc0000000000 [ 56.945064][ T457] RDX: 0000000000000000 RSI: ffffc900010bcdc0 RDI: ffffffff8155c7a4 [ 56.945082][ T457] RBP: ffffc900010bce50 R08: ffffffff88954947 R09: 1ffffffff112a928 [ 56.945101][ T457] R10: dffffc0000000000 R11: ffffc900010bd490 R12: ffffffff8155c7a4 [ 56.945127][ T457] R13: 0000000000000000 R14: ffffc900010bd458 R15: 0000000000000000 [ 56.945142][ T457] FS: 00007f76b26556c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.945164][ T457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.945180][ T457] CR2: ffffc900010bd490 CR3: 000000011c054000 CR4: 00000000003526b0 [ 56.945202][ T457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.945216][ T457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.945231][ T457] Call Trace: [ 56.945238][ T457] [ 56.945247][ T457] ? _RNvNtCs9jEwPDbx20M_4core3fmt5write+0x59e/0xaa0 [ 56.945287][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core3fmt5write+0x10/0x10 [ 56.945325][ T457] rust_fmt_argument+0x107/0x1a0 [ 56.945358][ T457] ? __cfi_rust_fmt_argument+0x10/0x10 [ 56.945391][ T457] ? record_print_text+0x2f7/0x430 [ 56.945428][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.945461][ T457] pointer+0x74e/0xdd0 [ 56.945487][ T457] ? down_trylock+0x56/0xc0 [ 56.945509][ T457] ? __printk_safe_exit+0xd/0x20 [ 56.945532][ T457] ? console_trylock+0x15d/0x210 [ 56.945566][ T457] ? string+0x2c0/0x2c0 [ 56.945592][ T457] ? format_decode+0x8c0/0x1600 [ 56.945627][ T457] vsnprintf+0xc7b/0x1aa0 [ 56.945657][ T457] vscnprintf+0x45/0x90 [ 56.945682][ T457] panic+0x193/0x700 [ 56.945713][ T457] ? __cfi_panic+0x10/0x10 [ 56.945744][ T457] ? printk_percpu_data_ready+0xd/0x20 [ 56.945775][ T457] rust_panic+0xc0/0xf0 [ 56.945806][ T457] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x175/0x1c0 [ 56.945837][ T457] ? record_print_text+0x26e/0x430 [ 56.945873][ T457] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 56.945922][ T457] ? record_print_text+0x2f7/0x430 [ 56.945959][ T457] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 56.945996][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 56.946034][ T457] ? __kasan_check_write+0x18/0x20 [ 56.946060][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.946090][ T457] ? prb_read_valid+0x41/0x80 [ 56.946126][ T457] ? wq_watchdog_touch+0x104/0x190 [ 56.946154][ T457] ? io_serial_out+0x5c/0xd0 [ 56.946179][ T457] _RNvNtCs9jEwPDbx20M_4core9panicking14panic_nounwind+0xa7/0xb0 [ 56.946217][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking14panic_nounwind+0x10/0x10 [ 56.946257][ T457] _RNvNtCs9jEwPDbx20M_4core3fmt5write+0xa87/0xaa0 [ 56.946292][ T457] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 56.946316][ T457] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 56.946351][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core3fmt5write+0x10/0x10 [ 56.946386][ T457] ? console_flush_all+0x6fb/0xaa0 [ 56.946423][ T457] ? console_flush_all+0x9fa/0xaa0 [ 56.946461][ T457] rust_fmt_argument+0x107/0x1a0 [ 56.946495][ T457] ? __cfi_rust_fmt_argument+0x10/0x10 [ 56.946528][ T457] ? __kasan_check_write+0x18/0x20 [ 56.946559][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.946587][ T457] ? __console_rewind_all+0x170/0x170 [ 56.946622][ T457] ? __kasan_check_read+0x15/0x20 [ 56.946647][ T457] ? is_printk_cpu_sync_owner+0x39/0x50 [ 56.946672][ T457] ? is_printk_legacy_deferred+0x5c/0x70 [ 56.946699][ T457] pointer+0x74e/0xdd0 [ 56.946725][ T457] ? __cfi_console_unlock+0x10/0x10 [ 56.946757][ T457] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 56.946791][ T457] ? string+0x2c0/0x2c0 [ 56.946818][ T457] ? format_decode+0x8c0/0x1600 [ 56.946846][ T457] vsnprintf+0xc7b/0x1aa0 [ 56.946875][ T457] vscnprintf+0x45/0x90 [ 56.946902][ T457] panic+0x193/0x700 [ 56.946932][ T457] ? __cfi_panic+0x10/0x10 [ 56.946960][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x1d50/0x21e0 [ 56.946996][ T457] ? printk_percpu_data_ready+0xd/0x20 [ 56.947027][ T457] rust_panic+0xc0/0xf0 [ 56.947057][ T457] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x175/0x1c0 [ 56.947089][ T457] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 56.947139][ T457] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 56.947171][ T457] ? __kasan_check_write+0x18/0x20 [ 56.947197][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.947225][ T457] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.947260][ T457] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 56.947296][ T457] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 56.947333][ T457] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 56.947365][ T457] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 56.947394][ T457] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 56.947430][ T457] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 56.947465][ T457] ? __kasan_check_read+0x15/0x20 [ 56.947490][ T457] ? check_new_pages+0x196/0x370 [ 56.947517][ T457] ? __kasan_check_write+0x18/0x20 [ 56.947542][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.947570][ T457] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.947600][ T457] ? __kasan_check_write+0x18/0x20 [ 56.947626][ T457] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 56.947662][ T457] ? __set_page_owner+0x3bf/0x5d0 [ 56.947698][ T457] ? __cfi___set_page_owner+0x10/0x10 [ 56.947732][ T457] ? kasan_unpoison+0x4a/0x70 [ 56.947761][ T457] ? __cfi_post_alloc_hook+0x10/0x10 [ 56.947802][ T457] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 56.947830][ T457] ? _raw_spin_trylock+0xaf/0x130 [ 56.947860][ T457] ? __cfi__raw_spin_trylock+0x10/0x10 [ 56.947896][ T457] ? is_bpf_text_address+0x17b/0x1a0 [ 56.947930][ T457] ? kernel_text_address+0xa9/0xe0 [ 56.947954][ T457] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 56.947988][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.948017][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.948049][ T457] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.948080][ T457] ? stack_depot_save_flags+0x399/0x800 [ 56.948109][ T457] ? kasan_save_track+0x4f/0x80 [ 56.948145][ T457] ? kasan_save_track+0x3e/0x80 [ 56.948172][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.948196][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.948225][ T457] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 56.948253][ T457] ? __set_page_owner+0x294/0x5d0 [ 56.948285][ T457] ? post_alloc_hook+0x3b9/0x3f0 [ 56.948318][ T457] ? prep_new_page+0x1c/0x120 [ 56.948350][ T457] ? get_page_from_freelist+0x46bb/0x4750 [ 56.948373][ T457] ? __alloc_pages_noprof+0x30d/0x6c0 [ 56.948396][ T457] ? stack_depot_save_flags+0x672/0x800 [ 56.948422][ T457] ? kasan_save_track+0x4f/0x80 [ 56.948450][ T457] ? kasan_save_free_info+0x4a/0x60 [ 56.948474][ T457] ? __kasan_slab_free+0x5f/0x80 [ 56.948504][ T457] ? kfree+0x156/0x400 [ 56.948527][ T457] ? avc_audit_post_callback+0x2fd/0x780 [ 56.948551][ T457] ? common_lsm_audit+0x147a/0x1860 [ 56.948572][ T457] ? slow_avc_audit+0x18d/0x1f0 [ 56.948594][ T457] ? avc_has_perm+0x1cd/0x220 [ 56.948616][ T457] ? selinux_binder_set_context_mgr+0xcf/0x110 [ 56.948644][ T457] ? security_binder_set_context_mgr+0x44/0xb0 [ 56.948666][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process14set_as_manager+0x3b8/0xa60 [ 56.948696][ T457] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x135a/0x2c20 [ 56.948728][ T457] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 56.948760][ T457] ? __se_sys_ioctl+0x132/0x1b0 [ 56.948790][ T457] ? __x64_sys_ioctl+0x7f/0xa0 [ 56.948820][ T457] ? x64_sys_call+0x1878/0x2ee0 [ 56.948851][ T457] ? do_syscall_64+0x58/0xf0 [ 56.948879][ T457] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.948917][ T457] ? __kasan_check_write+0x18/0x20 [ 56.948941][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.948971][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.949003][ T457] ? __set_page_owner+0x294/0x5d0 [ 56.949046][ T457] ? is_bpf_text_address+0x17b/0x1a0 [ 56.949080][ T457] ? kernel_text_address+0xa9/0xe0 [ 56.949105][ T457] ? __kasan_check_write+0x18/0x20 [ 56.949136][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.949167][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.949201][ T457] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.949231][ T457] ? stack_depot_save_flags+0x399/0x800 [ 56.949262][ T457] ? kasan_save_track+0x4f/0x80 [ 56.949290][ T457] ? kasan_save_track+0x3e/0x80 [ 56.949318][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.949342][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.949372][ T457] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 56.949398][ T457] ? __set_page_owner+0x294/0x5d0 [ 56.949430][ T457] ? post_alloc_hook+0x3b9/0x3f0 [ 56.949464][ T457] ? prep_new_page+0x1c/0x120 [ 56.949495][ T457] ? get_page_from_freelist+0x46bb/0x4750 [ 56.949519][ T457] ? __alloc_pages_noprof+0x30d/0x6c0 [ 56.949541][ T457] ? alloc_slab_page+0x6b/0x1f0 [ 56.949571][ T457] ? allocate_slab+0x69/0x450 [ 56.949603][ T457] ? ___slab_alloc+0x59a/0x8b0 [ 56.949631][ T457] ? __kmalloc_node_track_caller_noprof+0x23a/0x440 [ 56.949660][ T457] ? krealloc_noprof+0x8d/0x130 [ 56.949688][ T457] ? rust_helper_krealloc+0x33/0xd0 [ 56.949710][ T457] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 56.949745][ T457] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_open+0x202/0x11e0 [ 56.949778][ T457] ? do_dentry_open+0x978/0x1510 [ 56.949811][ T457] ? vfs_open+0x86/0x230 [ 56.949832][ T457] ? path_openat+0x2b6c/0x34b0 [ 56.949864][ T457] ? do_filp_open+0x1c6/0x3e0 [ 56.949896][ T457] ? do_sys_openat2+0x12c/0x1c0 [ 56.949919][ T457] ? __x64_sys_openat+0x13a/0x170 [ 56.949941][ T457] ? x64_sys_call+0xe69/0x2ee0 [ 56.949970][ T457] ? do_syscall_64+0x58/0xf0 [ 56.949998][ T457] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.950043][ T457] ? is_bpf_text_address+0x17b/0x1a0 [ 56.950075][ T457] ? kernel_text_address+0xa9/0xe0 [ 56.950100][ T457] ? __kasan_check_write+0x18/0x20 [ 56.950214][ T457] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 56.950245][ T457] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.950277][ T457] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.950307][ T457] ? stack_depot_save_flags+0x399/0x800 [ 56.950335][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.950359][ T457] ? kasan_save_track+0x4f/0x80 [ 56.950387][ T457] ? kasan_save_track+0x3e/0x80 [ 56.950416][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.950439][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.950468][ T457] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 56.950497][ T457] ? krealloc_noprof+0x8d/0x130 [ 56.950527][ T457] ? rust_helper_krealloc+0x33/0xd0 [ 56.950550][ T457] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 56.950586][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 56.950617][ T457] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 56.950649][ T457] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 56.950683][ T457] ? __se_sys_ioctl+0x132/0x1b0 [ 56.950713][ T457] ? __x64_sys_ioctl+0x7f/0xa0 [ 56.950743][ T457] ? do_syscall_64+0x58/0xf0 [ 56.950772][ T457] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.950812][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.950843][ T457] ? kasan_save_alloc_info+0x40/0x50 [ 56.950865][ T457] ? __kasan_kmalloc+0x96/0xb0 [ 56.950897][ T457] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 56.950927][ T457] ? __kasan_check_write+0x18/0x20 [ 56.950952][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.950981][ T457] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.951009][ T457] ? cgroup_rstat_updated+0x132/0x7f0 [ 56.951034][ T457] ? _raw_spin_unlock+0x45/0x60 [ 56.951063][ T457] ? rust_helper_spin_unlock+0x19/0x30 [ 56.951088][ T457] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 56.951128][ T457] ? detach_entity_load_avg+0x7b0/0x7b0 [ 56.951160][ T457] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 56.951193][ T457] ? xfd_validate_state+0x68/0x150 [ 56.951220][ T457] ? save_fpregs_to_fpstate+0x196/0x230 [ 56.951253][ T457] ? __kasan_check_write+0x18/0x20 [ 56.951279][ T457] ? __switch_to+0xc7b/0x1310 [ 56.951309][ T457] ? pick_next_task_fair+0x870/0x900 [ 56.951334][ T457] ? _raw_spin_lock+0x8c/0x120 [ 56.951362][ T457] ? _raw_spin_unlock+0x45/0x60 [ 56.951390][ T457] ? finish_task_switch+0x13a/0x780 [ 56.951413][ T457] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 56.951444][ T457] ? __schedule+0x1463/0x1f10 [ 56.951477][ T457] ? avc_has_extended_perms+0x7c7/0xdd0 [ 56.951501][ T457] ? __asan_memcpy+0x5a/0x80 [ 56.951527][ T457] ? avc_has_extended_perms+0x921/0xdd0 [ 56.951552][ T457] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 56.951583][ T457] ? do_vfs_ioctl+0xeda/0x1e30 [ 56.951614][ T457] ? preempt_schedule_common+0x2d/0x60 [ 56.951647][ T457] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 56.951679][ T457] ? __cfi_preempt_schedule+0x10/0x10 [ 56.951714][ T457] ? preempt_schedule_thunk+0x1a/0x40 [ 56.951749][ T457] ? try_to_wake_up+0xe17/0x1aa0 [ 56.951786][ T457] ? ioctl_has_perm+0x384/0x4d0 [ 56.951820][ T457] ? has_cap_mac_admin+0xd0/0xd0 [ 56.951852][ T457] ? futex_wake+0x63a/0x900 [ 56.951876][ T457] ? __cfi_futex_wake+0x10/0x10 [ 56.951897][ T457] ? selinux_file_ioctl+0x6e0/0x1360 [ 56.951932][ T457] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 56.951966][ T457] ? do_futex+0x356/0x500 [ 56.952000][ T457] ? __cfi_do_futex+0x10/0x10 [ 56.952034][ T457] ? __fget_files+0x2c5/0x340 [ 56.952067][ T457] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 56.952100][ T457] ? __se_sys_ioctl+0x114/0x1b0 [ 56.952139][ T457] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 56.952174][ T457] __se_sys_ioctl+0x132/0x1b0 [ 56.952205][ T457] __x64_sys_ioctl+0x7f/0xa0 [ 56.952237][ T457] x64_sys_call+0x1878/0x2ee0 [ 56.952267][ T457] do_syscall_64+0x58/0xf0 [ 56.952295][ T457] ? clear_bhb_loop+0x35/0x90 [ 56.952328][ T457] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.952360][ T457] RIP: 0033:0x7f76b178e929 [ 56.952377][ T457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.952397][ T457] RSP: 002b:00007f76b2655038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.952422][ T457] RAX: ffffffffffffffda RBX: 00007f76b19b5fa0 RCX: 00007f76b178e929 [ 56.952440][ T457] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 56.952456][ T457] RBP: 00007f76b1810b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.952471][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.952487][ T457] R13: 0000000000000000 R14: 00007f76b19b5fa0 R15: 00007fffe3131af8 [ 56.952506][ T457] [ 56.952513][ T457] Modules linked in: [ 56.952545][ T457] CR2: ffffc900010bd490 [ 56.952556][ T457] ---[ end trace 0000000000000000 ]--- [ 56.952567][ T457] RIP: 0010:0xffffc900010bd490 [ 56.952586][ T457] Code: ff ff e8 d6 0b 01 00 c9 ff ff d4 7a 21 00 20 f9 ff 1f 00 00 00 00 00 fc ff df f6 94 ed 86 ff ff ff ff 10 d7 0b 01 00 c9 ff ff <50> d5 0b 01 00 c9 ff ff 07 4f 06 81 ff ff ff ff 20 ac 97 88 ff ff [ 56.952605][ T457] RSP: 0018:ffffc900010bcd18 EFLAGS: 00010046 [ 56.952624][ T457] RAX: 1ffff92000217a8b RBX: 0000000000000000 RCX: dffffc0000000000 [ 56.952641][ T457] RDX: 0000000000000000 RSI: ffffc900010bcdc0 RDI: ffffffff8155c7a4 [ 56.952657][ T457] RBP: ffffc900010bce50 R08: ffffffff88954947 R09: 1ffffffff112a928 [ 56.952675][ T457] R10: dffffc0000000000 R11: ffffc900010bd490 R12: ffffffff8155c7a4 [ 56.952693][ T457] R13: 0000000000000000 R14: ffffc900010bd458 R15: 0000000000000000 [ 56.952709][ T457] FS: 00007f76b26556c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.952730][ T457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.952747][ T457] CR2: ffffc900010bd490 CR3: 000000011c054000 CR4: 00000000003526b0 [ 56.952767][ T457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.952783][ T457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.952800][ T457] Kernel panic - not syncing: Fatal exception [ 56.956382][ T457] Kernel Offset: disabled