device nr0 entered promiscuous mode BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 IP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline] IP: kthread_stop+0x4c/0x650 kernel/kthread.c:525 PGD 9c622067 P4D 9c622067 PUD 97407067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 10076 Comm: syz-executor.3 Not tainted 4.14.135 #31 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88806c42c000 task.stack: ffff888068500000 RIP: 0010:atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RIP: 0010:kthread_stop+0x4c/0x650 kernel/kthread.c:525 RSP: 0018:ffff888068507b88 EFLAGS: 00010297 RAX: ffff88806c42c000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000286 RBP: ffff888068507ba8 R08: ffff88806c42c000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8882180e3d38 R14: ffff8880a9e6fc30 R15: ffff8880a9e6fc28 FS: 00000000020b6940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000000904be000 CR4: 00000000001406f0 Call Trace: sdr_cap_stop_streaming+0x1fc/0x320 drivers/media/platform/vivid/vivid-sdr-cap.c:313 __vb2_queue_cancel+0xa3/0x890 drivers/media/v4l2-core/videobuf2-core.c:1655 vb2_core_streamoff+0x52/0x110 drivers/media/v4l2-core/videobuf2-core.c:1788 __vb2_cleanup_fileio+0x78/0x150 drivers/media/v4l2-core/videobuf2-core.c:2313 vb2_core_queue_release+0x1d/0x80 drivers/media/v4l2-core/videobuf2-core.c:2040 vb2_queue_release drivers/media/v4l2-core/videobuf2-v4l2.c:669 [inline] _vb2_fop_release+0x1cf/0x2a0 drivers/media/v4l2-core/videobuf2-v4l2.c:840 vb2_fop_release+0x75/0xc0 drivers/media/v4l2-core/videobuf2-v4l2.c:854 vivid_fop_release+0x180/0x3f0 drivers/media/platform/vivid/vivid-core.c:486 v4l2_release+0xf9/0x190 drivers/media/v4l2-core/v4l2-dev.c:446 __fput+0x275/0x7a0 fs/file_table.c:210 ____fput+0x16/0x20 fs/file_table.c:244 task_work_run+0x114/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x1da/0x220 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4bc/0x640 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x413511 RSP: 002b:00007ffc81e2f5f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413511 RDX: 0000001b30a20000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000001 R08: ffffffff817bc9b9 R09: 0000000010745ce9 R10: 00007ffc81e2f6d0 R11: 0000000000000293 R12: 000000000075bf20 R13: 0000000000026a84 R14: 00000000007601b0 R15: ffffffffffffffff Code: 00 65 8b 1d f7 6c c3 7e 83 fb 3f 0f 87 5e 04 00 00 e8 19 b0 1e 00 89 db 48 0f a3 1d 0f 31 e7 06 0f 82 47 03 00 00 e8 04 b0 1e 00 41 ff 44 24 20 49 8d 7c 24 24 48 b8 00 00 00 00 00 fc ff df RIP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RSP: ffff888068507b88 RIP: kthread_stop+0x4c/0x650 kernel/kthread.c:525 RSP: ffff888068507b88 CR2: 0000000000000020 ---[ end trace 837778f8916d943d ]---