[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 62.825236][ T6888] ================================================================================ [ 62.834999][ T6888] UBSAN: array-index-out-of-bounds in drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:942:56 [ 62.846825][ T6888] index 29375 is out of range for type 's8 [257]' [ 62.854522][ T6888] CPU: 0 PID: 6888 Comm: vivid-000-vid-c Not tainted 5.9.0-rc8-syzkaller #0 [ 62.863197][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.873251][ T6888] Call Trace: [ 62.876547][ T6888] dump_stack+0x198/0x1fd [ 62.880885][ T6888] ubsan_epilogue+0xb/0x5a [ 62.885304][ T6888] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 62.891499][ T6888] precalculate_color+0x2621/0x2900 [ 62.896715][ T6888] ? color_to_ycbcr.isra.0+0x720/0x720 [ 62.902208][ T6888] tpg_recalc+0x5c8/0x2910 [ 62.906654][ T6888] ? gen_twopix+0x61a0/0x61a0 [ 62.911360][ T6888] ? mark_lock+0x82/0x1660 [ 62.915802][ T6888] ? mark_lock+0x82/0x1660 [ 62.920228][ T6888] tpg_calc_text_basep+0xbe/0x2b0 [ 62.925269][ T6888] vivid_fillbuff+0x188d/0x3c50 [ 62.930156][ T6888] ? vivid_grab_controls+0x380/0x380 [ 62.935431][ T6888] ? lock_is_held_type+0xbb/0xf0 [ 62.940350][ T6888] ? find_held_lock+0x2d/0x110 [ 62.945091][ T6888] ? vivid_thread_vid_cap_tick+0x10f4/0x2350 [ 62.951049][ T6888] ? lock_downgrade+0x830/0x830 [ 62.955874][ T6888] ? do_raw_spin_lock+0x120/0x2b0 [ 62.960875][ T6888] ? v4l2_ctrl_request_setup+0x45f/0xb00 [ 62.966486][ T6888] ? rwlock_bug.part.0+0x90/0x90 [ 62.971421][ T6888] vivid_thread_vid_cap_tick+0x88b/0x2350 [ 62.977129][ T6888] ? check_preemption_disabled+0x50/0x130 [ 62.982826][ T6888] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 [ 62.989308][ T6888] ? lockdep_hardirqs_on+0x53/0x100 [ 62.994486][ T6888] ? mutex_trylock+0x246/0x2c0 [ 62.999227][ T6888] ? vivid_thread_vid_cap+0x2b9/0xa50 [ 63.004579][ T6888] vivid_thread_vid_cap+0x5d1/0xa50 [ 63.009773][ T6888] ? vivid_thread_vid_cap_tick+0x2350/0x2350 [ 63.015743][ T6888] kthread+0x3b5/0x4a0 [ 63.019792][ T6888] ? __kthread_bind_mask+0xc0/0xc0 [ 63.024896][ T6888] ret_from_fork+0x1f/0x30 [ 63.041580][ T6888] ================================================================================ [ 63.055965][ T6888] Kernel panic - not syncing: panic_on_warn set ... [ 63.062570][ T6888] CPU: 0 PID: 6888 Comm: vivid-000-vid-c Not tainted 5.9.0-rc8-syzkaller #0 [ 63.071237][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.081290][ T6888] Call Trace: [ 63.084588][ T6888] dump_stack+0x198/0x1fd [ 63.088935][ T6888] panic+0x382/0x7fb [ 63.092836][ T6888] ? __warn_printk+0xf3/0xf3 [ 63.097438][ T6888] ? mark_lock+0x82/0x1660 [ 63.101863][ T6888] ? ubsan_epilogue+0x3e/0x5a [ 63.106540][ T6888] ? ubsan_epilogue+0x35/0x5a [ 63.111223][ T6888] ubsan_epilogue+0x54/0x5a [ 63.115735][ T6888] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.121903][ T6888] precalculate_color+0x2621/0x2900 [ 63.127130][ T6888] ? color_to_ycbcr.isra.0+0x720/0x720 [ 63.132620][ T6888] tpg_recalc+0x5c8/0x2910 [ 63.137048][ T6888] ? gen_twopix+0x61a0/0x61a0 [ 63.141713][ T6888] ? mark_lock+0x82/0x1660 [ 63.146129][ T6888] ? mark_lock+0x82/0x1660 [ 63.150557][ T6888] tpg_calc_text_basep+0xbe/0x2b0 [ 63.155599][ T6888] vivid_fillbuff+0x188d/0x3c50 [ 63.160454][ T6888] ? vivid_grab_controls+0x380/0x380 [ 63.165741][ T6888] ? lock_is_held_type+0xbb/0xf0 [ 63.170677][ T6888] ? find_held_lock+0x2d/0x110 [ 63.175439][ T6888] ? vivid_thread_vid_cap_tick+0x10f4/0x2350 [ 63.181471][ T6888] ? lock_downgrade+0x830/0x830 [ 63.186334][ T6888] ? do_raw_spin_lock+0x120/0x2b0 [ 63.191341][ T6888] ? v4l2_ctrl_request_setup+0x45f/0xb00 [ 63.196957][ T6888] ? rwlock_bug.part.0+0x90/0x90 [ 63.201887][ T6888] vivid_thread_vid_cap_tick+0x88b/0x2350 [ 63.207607][ T6888] ? check_preemption_disabled+0x50/0x130 [ 63.213335][ T6888] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 [ 63.219821][ T6888] ? lockdep_hardirqs_on+0x53/0x100 [ 63.225002][ T6888] ? mutex_trylock+0x246/0x2c0 [ 63.229748][ T6888] ? vivid_thread_vid_cap+0x2b9/0xa50 [ 63.235102][ T6888] vivid_thread_vid_cap+0x5d1/0xa50 [ 63.240315][ T6888] ? vivid_thread_vid_cap_tick+0x2350/0x2350 [ 63.246316][ T6888] kthread+0x3b5/0x4a0 [ 63.250406][ T6888] ? __kthread_bind_mask+0xc0/0xc0 [ 63.255512][ T6888] ret_from_fork+0x1f/0x30 [ 63.261055][ T6888] Kernel Offset: disabled [ 63.265429][ T6888] Rebooting in 86400 seconds..