================================================================== BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_extras drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2439 [inline] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x2b1f/0x43c0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2707 Write of size 1 at addr ffffc9000ce53000 by task vivid-000-vid-c/26941 CPU: 2 UID: 0 PID: 26941 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 tpg_fill_plane_extras drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2439 [inline] tpg_fill_plane_buffer+0x2b1f/0x43c0 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2707 vivid_fillbuff+0x8d2/0x4250 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:470 vivid_thread_vid_cap_tick+0x814/0x15d0 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:629 vivid_thread_vid_cap+0x454/0xda0 drivers/media/test-drivers/vivid/vivid-kthread-cap.c:767 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 The buggy address belongs to a vmalloc virtual mapping Memory state around the buggy address: ffffc9000ce52f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffffc9000ce52f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffffc9000ce53000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc9000ce53080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc9000ce53100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ==================================================================