Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. executing program [ 84.276286][ T9311] IPVS: ftp: loaded support on port[0] = 21 [ 84.348519][ T9313] ================================================================== [ 84.356885][ T9313] BUG: KASAN: global-out-of-bounds in precalculate_color+0x2154/0x2480 [ 84.365156][ T9313] Read of size 1 at addr ffffffff88b3d3f9 by task vivid-000-vid-c/9313 [ 84.373416][ T9313] [ 84.375754][ T9313] CPU: 0 PID: 9313 Comm: vivid-000-vid-c Not tainted 5.5.0-rc3-syzkaller #0 [ 84.385526][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.395845][ T9313] Call Trace: [ 84.399120][ T9313] dump_stack+0x197/0x210 [ 84.403576][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.408939][ T9313] print_address_description.constprop.0.cold+0x5/0x30b [ 84.416129][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.421589][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.426970][ T9313] __kasan_report.cold+0x1b/0x41 [ 84.431960][ T9313] ? color_to_ycbcr.isra.0+0x350/0x660 [ 84.437420][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.442947][ T9313] kasan_report+0x12/0x20 [ 84.447280][ T9313] __asan_report_load1_noabort+0x14/0x20 [ 84.453035][ T9313] precalculate_color+0x2154/0x2480 [ 84.458280][ T9313] ? color_to_ycbcr.isra.0+0x660/0x660 [ 84.463795][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.468836][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.474023][ T9313] ? mark_lock+0xc2/0x1220 [ 84.478477][ T9313] ? mark_lock+0xc2/0x1220 [ 84.482952][ T9313] tpg_recalc+0x561/0x2850 [ 84.487360][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.492385][ T9313] ? mark_lock+0xc2/0x1220 [ 84.497478][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.502675][ T9313] ? __lock_acquire+0x16f2/0x4a00 [ 84.507706][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.512849][ T9313] ? tpg_get_color.isra.0+0x300/0x300 [ 84.518228][ T9313] ? mark_lock+0xc2/0x1220 [ 84.522731][ T9313] ? vb2_vmalloc_vaddr+0x37/0x50 [ 84.527681][ T9313] tpg_calc_text_basep+0xa1/0x290 [ 84.532722][ T9313] vivid_fillbuff+0x1a5f/0x3af0 [ 84.537576][ T9313] ? vivid_grab_controls+0x380/0x380 [ 84.543045][ T9313] ? find_held_lock+0x35/0x130 [ 84.547826][ T9313] ? vivid_thread_vid_cap_tick+0x112f/0x2210 [ 84.553816][ T9313] ? lock_downgrade+0x920/0x920 [ 84.558745][ T9313] ? rwlock_bug.part.0+0x90/0x90 [ 84.563693][ T9313] ? v4l2_ctrl_request_setup+0x46c/0xb30 [ 84.569474][ T9313] vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 84.575387][ T9313] ? vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 84.581285][ T9313] ? usleep_range+0x170/0x170 [ 84.586044][ T9313] ? lock_acquire+0x190/0x410 [ 84.590744][ T9313] vivid_thread_vid_cap+0x5d8/0xa60 [ 84.595939][ T9313] kthread+0x361/0x430 [ 84.600008][ T9313] ? vivid_thread_vid_cap_tick+0x2210/0x2210 [ 84.606115][ T9313] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 84.611837][ T9313] ret_from_fork+0x24/0x30 [ 84.616336][ T9313] [ 84.618652][ T9313] The buggy address belongs to the variable: [ 84.624629][ T9313] kbd_keycodes+0x119/0x760 [ 84.629105][ T9313] [ 84.631759][ T9313] Memory state around the buggy address: [ 84.637368][ T9313] ffffffff88b3d280: fa fa fa fa 00 00 04 fa fa fa fa fa 00 00 00 00 [ 84.645603][ T9313] ffffffff88b3d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.653664][ T9313] >ffffffff88b3d380: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa [ 84.662462][ T9313] ^ [ 84.670465][ T9313] ffffffff88b3d400: 00 00 00 00 07 fa fa fa fa fa fa fa 00 00 00 00 [ 84.678532][ T9313] ffffffff88b3d480: 00 fa fa fa fa fa fa fa 02 fa fa fa fa fa fa fa [ 84.686589][ T9313] ================================================================== [ 84.694639][ T9313] Disabling lock debugging due to kernel taint [ 84.701943][ T9313] Kernel panic - not syncing: panic_on_warn set ... [ 84.708567][ T9313] CPU: 0 PID: 9313 Comm: vivid-000-vid-c Tainted: G B 5.5.0-rc3-syzkaller #0 [ 84.718609][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.728644][ T9313] Call Trace: [ 84.732176][ T9313] dump_stack+0x197/0x210 [ 84.736484][ T9313] panic+0x2e3/0x75c [ 84.740356][ T9313] ? add_taint.cold+0x16/0x16 [ 84.745026][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.750380][ T9313] ? preempt_schedule+0x4b/0x60 [ 84.755208][ T9313] ? ___preempt_schedule+0x16/0x18 [ 84.760313][ T9313] ? trace_hardirqs_on+0x5e/0x240 [ 84.765343][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.770708][ T9313] end_report+0x47/0x4f [ 84.774843][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.780195][ T9313] __kasan_report.cold+0xe/0x41 [ 84.785023][ T9313] ? color_to_ycbcr.isra.0+0x350/0x660 [ 84.790561][ T9313] ? precalculate_color+0x2154/0x2480 [ 84.796025][ T9313] kasan_report+0x12/0x20 [ 84.800350][ T9313] __asan_report_load1_noabort+0x14/0x20 [ 84.805974][ T9313] precalculate_color+0x2154/0x2480 [ 84.811163][ T9313] ? color_to_ycbcr.isra.0+0x660/0x660 [ 84.816733][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.821916][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.826932][ T9313] ? mark_lock+0xc2/0x1220 [ 84.831453][ T9313] ? mark_lock+0xc2/0x1220 [ 84.835871][ T9313] tpg_recalc+0x561/0x2850 [ 84.840275][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.845314][ T9313] ? mark_lock+0xc2/0x1220 [ 84.849725][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.854746][ T9313] ? __lock_acquire+0x16f2/0x4a00 [ 84.859864][ T9313] ? __kasan_check_read+0x11/0x20 [ 84.864908][ T9313] ? tpg_get_color.isra.0+0x300/0x300 [ 84.870377][ T9313] ? mark_lock+0xc2/0x1220 [ 84.874778][ T9313] ? vb2_vmalloc_vaddr+0x37/0x50 [ 84.879773][ T9313] tpg_calc_text_basep+0xa1/0x290 [ 84.884819][ T9313] vivid_fillbuff+0x1a5f/0x3af0 [ 84.889686][ T9313] ? vivid_grab_controls+0x380/0x380 [ 84.895147][ T9313] ? find_held_lock+0x35/0x130 [ 84.899911][ T9313] ? vivid_thread_vid_cap_tick+0x112f/0x2210 [ 84.906078][ T9313] ? lock_downgrade+0x920/0x920 [ 84.911657][ T9313] ? rwlock_bug.part.0+0x90/0x90 [ 84.916799][ T9313] ? v4l2_ctrl_request_setup+0x46c/0xb30 [ 84.922730][ T9313] vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 84.928536][ T9313] ? vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 84.934433][ T9313] ? usleep_range+0x170/0x170 [ 84.939111][ T9313] ? lock_acquire+0x190/0x410 [ 84.943806][ T9313] vivid_thread_vid_cap+0x5d8/0xa60 [ 84.949142][ T9313] kthread+0x361/0x430 [ 84.954328][ T9313] ? vivid_thread_vid_cap_tick+0x2210/0x2210 [ 84.960310][ T9313] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 84.966022][ T9313] ret_from_fork+0x24/0x30 [ 84.971847][ T9313] Kernel Offset: disabled [ 84.976176][ T9313] Rebooting in 86400 seconds..