================================================================== BUG: KASAN: global-out-of-bounds in precalculate_color+0x212e/0x23c0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:942 Read of size 1 at addr ffffffff88dbc81a by task vivid-000-vid-c/3669 CPU: 1 PID: 3669 Comm: vivid-000-vid-c Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x18f/0x20d lib/dump_stack.c:118 print_address_description.constprop.0.cold+0x5/0x497 mm/kasan/report.c:383 __kasan_report mm/kasan/report.c:513 [inline] kasan_report.cold+0x1f/0x37 mm/kasan/report.c:530 precalculate_color+0x212e/0x23c0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:942 tpg_precalculate_colors drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:1093 [inline] tpg_recalc+0x5c8/0x2590 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2144 tpg_calc_text_basep+0xb4/0x260 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2162 vivid_fillbuff+0x17dc/0x39d0 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:466 vivid_thread_vid_cap_tick+0x88b/0x2330 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:727 vivid_thread_vid_cap+0x5d1/0xa50 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:866 kthread+0x3b5/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 The buggy address belongs to the variable: __param_str_debug+0x103a/0x1ae0 Memory state around the buggy address: ffffffff88dbc700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 ffffffff88dbc780: f9 f9 f9 f9 00 00 00 05 f9 f9 f9 f9 00 00 00 07 >ffffffff88dbc800: f9 f9 f9 f9 00 00 00 00 00 00 00 00 04 f9 f9 f9 ^ ffffffff88dbc880: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 ffffffff88dbc900: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00 ==================================================================