================================================================== BUG: KASAN: global-out-of-bounds in precalculate_color+0x212e/0x23c0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:942 Read of size 1 at addr ffffffff88dc83bf by task vivid-000-vid-c/8781 CPU: 1 PID: 8781 Comm: vivid-000-vid-c Not tainted 5.9.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x198/0x1fd lib/dump_stack.c:118 print_address_description.constprop.0.cold+0x5/0x497 mm/kasan/report.c:383 __kasan_report mm/kasan/report.c:513 [inline] kasan_report.cold+0x1f/0x37 mm/kasan/report.c:530 precalculate_color+0x212e/0x23c0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:942 tpg_precalculate_colors drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:1093 [inline] tpg_recalc+0x5c8/0x2590 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2144 tpg_calc_text_basep+0xb4/0x260 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2162 vivid_fillbuff+0x17dc/0x39d0 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:466 vivid_thread_vid_cap_tick+0x88b/0x2330 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:727 vivid_thread_vid_cap+0x5d1/0xa50 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:866 kthread+0x3b5/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 The buggy address belongs to the variable: tpg_colors+0x159f/0x3020 Memory state around the buggy address: ffffffff88dc8280: 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 ffffffff88dc8300: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 >ffffffff88dc8380: 00 00 00 00 00 04 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 ^ ffffffff88dc8400: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 00 06 f9 f9 ffffffff88dc8480: f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 00 04 f9 f9 ==================================================================