[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 59.713854][ T6827] ================================================================== [ 59.713909][ T6827] BUG: KASAN: global-out-of-bounds in fbcon_resize+0x781/0x810 [ 59.713922][ T6827] Read of size 4 at addr ffffffff8896c2d8 by task syz-executor232/6827 [ 59.713926][ T6827] [ 59.713942][ T6827] CPU: 0 PID: 6827 Comm: syz-executor232 Not tainted 5.9.0-rc4-syzkaller #0 [ 59.713951][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.713956][ T6827] Call Trace: [ 59.713973][ T6827] dump_stack+0x198/0x1fd [ 59.713990][ T6827] ? fbcon_resize+0x781/0x810 [ 59.714003][ T6827] ? fbcon_resize+0x781/0x810 [ 59.714021][ T6827] print_address_description.constprop.0.cold+0x5/0x497 [ 59.714049][ T6827] ? fbcon_resize+0x781/0x810 [ 59.714066][ T6827] ? lockdep_hardirqs_off+0x96/0xd0 [ 59.714082][ T6827] ? vprintk_func+0x97/0x1a6 [ 59.714099][ T6827] ? fbcon_resize+0x781/0x810 [ 59.714112][ T6827] ? fbcon_resize+0x781/0x810 [ 59.714125][ T6827] kasan_report.cold+0x1f/0x37 [ 59.714142][ T6827] ? fbcon_resize+0x781/0x810 [ 59.714159][ T6827] fbcon_resize+0x781/0x810 [ 59.714179][ T6827] ? display_to_var+0x7b0/0x7b0 [ 59.714213][ T6827] ? vc_do_resize+0x2f6/0x1150 [ 59.714225][ T6827] ? __kmalloc+0x1c7/0x310 [ 59.714243][ T6827] ? display_to_var+0x7b0/0x7b0 [ 59.714258][ T6827] vc_do_resize+0x535/0x1150 [ 59.714290][ T6827] ? lock_release+0x8f0/0x8f0 [ 59.714304][ T6827] ? lock_downgrade+0x830/0x830 [ 59.714317][ T6827] ? rwlock_bug.part.0+0x90/0x90 [ 59.714329][ T6827] ? check_preemption_disabled+0x50/0x130 [ 59.714343][ T6827] ? store_bind+0x6a0/0x6a0 [ 59.714359][ T6827] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 59.714374][ T6827] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 59.714388][ T6827] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 59.714410][ T6827] vt_ioctl+0x11d2/0x2cc0 [ 59.714427][ T6827] ? lock_downgrade+0x830/0x830 [ 59.714441][ T6827] ? vt_waitactive+0x350/0x350 [ 59.714454][ T6827] ? check_preemption_disabled+0x50/0x130 [ 59.714466][ T6827] ? kfree+0x221/0x2b0 [ 59.714483][ T6827] ? tomoyo_path_number_perm+0x415/0x4d0 [ 59.714498][ T6827] ? lockdep_hardirqs_on+0x53/0x100 [ 59.714519][ T6827] ? tomoyo_path_number_perm+0x244/0x4d0 [ 59.714537][ T6827] ? tomoyo_execute_permission+0x470/0x470 [ 59.714558][ T6827] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 59.714575][ T6827] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 59.714588][ T6827] ? vt_waitactive+0x350/0x350 [ 59.714607][ T6827] tty_ioctl+0x1019/0x15f0 [ 59.714626][ T6827] ? tty_fasync+0x390/0x390 [ 59.714641][ T6827] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 59.714659][ T6827] ? do_vfs_ioctl+0x27d/0x1090 [ 59.714677][ T6827] ? generic_block_fiemap+0x60/0x60 [ 59.714698][ T6827] ? lock_acquire+0x1f3/0xae0 [ 59.714722][ T6827] ? __fget_files+0x294/0x400 [ 59.714744][ T6827] ? bpf_lsm_file_ioctl+0x5/0x10 [ 59.714759][ T6827] ? tty_fasync+0x390/0x390 [ 59.714777][ T6827] __x64_sys_ioctl+0x193/0x200 [ 59.714798][ T6827] do_syscall_64+0x2d/0x70 [ 59.714813][ T6827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.714826][ T6827] RIP: 0033:0x445959 [ 59.714841][ T6827] Code: e8 fc b8 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.714850][ T6827] RSP: 002b:00007f854e4a1db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.714866][ T6827] RAX: ffffffffffffffda RBX: 00000000006dac38 RCX: 0000000000445959 [ 59.714876][ T6827] RDX: 0000000020001740 RSI: 0000000000005609 RDI: 0000000000000004 [ 59.714885][ T6827] RBP: 00000000006dac30 R08: 0000000000000000 R09: 0000000000000000 [ 59.714895][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac3c [ 59.714906][ T6827] R13: 00007ffda7e21a0f R14: 00007f854e4a29c0 R15: 20c49ba5e353f7cf [ 59.714930][ T6827] [ 59.714935][ T6827] The buggy address belongs to the variable: [ 59.714949][ T6827] font_vga_8x16+0x58/0x60 [ 59.714953][ T6827] [ 59.714958][ T6827] Memory state around the buggy address: [ 59.714971][ T6827] ffffffff8896c180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.714983][ T6827] ffffffff8896c200: 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 59.714995][ T6827] >ffffffff8896c280: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 59.715003][ T6827] ^ [ 59.715014][ T6827] ffffffff8896c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.715026][ T6827] ffffffff8896c380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.715039][ T6827] ================================================================== [ 59.715045][ T6827] Disabling lock debugging due to kernel taint [ 59.715052][ T6827] Kernel panic - not syncing: panic_on_warn set ... [ 59.715066][ T6827] CPU: 0 PID: 6827 Comm: syz-executor232 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 59.715072][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.715076][ T6827] Call Trace: [ 59.715090][ T6827] dump_stack+0x198/0x1fd [ 59.715103][ T6827] ? fbcon_resize+0x720/0x810 [ 59.715117][ T6827] panic+0x347/0x7c0 [ 59.715131][ T6827] ? __warn_printk+0xf3/0xf3 [ 59.715148][ T6827] ? trace_hardirqs_on+0x55/0x220 [ 59.715161][ T6827] ? fbcon_resize+0x781/0x810 [ 59.715172][ T6827] ? fbcon_resize+0x781/0x810 [ 59.715184][ T6827] end_report+0x4d/0x53 [ 59.715197][ T6827] kasan_report.cold+0xd/0x37 [ 59.715210][ T6827] ? fbcon_resize+0x781/0x810 [ 59.715223][ T6827] fbcon_resize+0x781/0x810 [ 59.715238][ T6827] ? display_to_var+0x7b0/0x7b0 [ 59.715257][ T6827] ? vc_do_resize+0x2f6/0x1150 [ 59.715268][ T6827] ? __kmalloc+0x1c7/0x310 [ 59.715281][ T6827] ? display_to_var+0x7b0/0x7b0 [ 59.715293][ T6827] vc_do_resize+0x535/0x1150 [ 59.715312][ T6827] ? lock_release+0x8f0/0x8f0 [ 59.715325][ T6827] ? lock_downgrade+0x830/0x830 [ 59.715337][ T6827] ? rwlock_bug.part.0+0x90/0x90 [ 59.715348][ T6827] ? check_preemption_disabled+0x50/0x130 [ 59.715359][ T6827] ? store_bind+0x6a0/0x6a0 [ 59.715372][ T6827] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 59.715386][ T6827] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 59.715398][ T6827] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 59.715413][ T6827] vt_ioctl+0x11d2/0x2cc0 [ 59.715427][ T6827] ? lock_downgrade+0x830/0x830 [ 59.715439][ T6827] ? vt_waitactive+0x350/0x350 [ 59.715451][ T6827] ? check_preemption_disabled+0x50/0x130 [ 59.715462][ T6827] ? kfree+0x221/0x2b0 [ 59.715476][ T6827] ? tomoyo_path_number_perm+0x415/0x4d0 [ 59.715489][ T6827] ? lockdep_hardirqs_on+0x53/0x100 [ 59.715505][ T6827] ? tomoyo_path_number_perm+0x244/0x4d0 [ 59.715519][ T6827] ? tomoyo_execute_permission+0x470/0x470 [ 59.715533][ T6827] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 59.715546][ T6827] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 59.715557][ T6827] ? vt_waitactive+0x350/0x350 [ 59.715570][ T6827] tty_ioctl+0x1019/0x15f0 [ 59.715585][ T6827] ? tty_fasync+0x390/0x390 [ 59.715597][ T6827] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 59.715609][ T6827] ? do_vfs_ioctl+0x27d/0x1090 [ 59.715623][ T6827] ? generic_block_fiemap+0x60/0x60 [ 59.715637][ T6827] ? lock_acquire+0x1f3/0xae0 [ 59.715653][ T6827] ? __fget_files+0x294/0x400 [ 59.715668][ T6827] ? bpf_lsm_file_ioctl+0x5/0x10 [ 59.715681][ T6827] ? tty_fasync+0x390/0x390 [ 59.715695][ T6827] __x64_sys_ioctl+0x193/0x200 [ 59.715709][ T6827] do_syscall_64+0x2d/0x70 [ 59.715722][ T6827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.715732][ T6827] RIP: 0033:0x445959 [ 59.715744][ T6827] Code: e8 fc b8 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.715751][ T6827] RSP: 002b:00007f854e4a1db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.715764][ T6827] RAX: ffffffffffffffda RBX: 00000000006dac38 RCX: 0000000000445959 [ 59.715772][ T6827] RDX: 0000000020001740 RSI: 0000000000005609 RDI: 0000000000000004 [ 59.715780][ T6827] RBP: 00000000006dac30 R08: 0000000000000000 R09: 0000000000000000 [ 59.715788][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac3c [ 59.715797][ T6827] R13: 00007ffda7e21a0f R14: 00007f854e4a29c0 R15: 20c49ba5e353f7cf [ 59.716942][ T6827] Kernel Offset: disabled [ 60.507405][ T6827] Rebooting in 86400 seconds..