kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 9644 Comm: syz-executor.3 Not tainted 4.14.140 #36
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
kobject: 'loop5' (ffff8880a4b34960): kobject_uevent_env
task: ffff888084730400 task.stack: ffff888052b08000
RIP: 0010:vb2_vmalloc_put_userptr+0x6e/0x210 drivers/media/v4l2-core/videobuf2-vmalloc.c:136
RSP: 0018:ffff888052b0fc18 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffffc900137be000 RCX: 1ffffffff0da7670
RDX: 0000000000000001 RSI: ffff8880a1802794 RDI: 0000000000000009
RBP: ffff888052b0fc40 R08: dffffc0000000000 R09: ffffffff88cb73f8
R10: ffff888052b0fcd0 R11: ffff888084730400 R12: ffff88809af7ac80
R13: 0000000000000000 R14: ffff88809af7ac80 R15: ffff88809af7ac88
FS:  00000000016ca940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001a533f0 CR3: 000000005f44d000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __vb2_buf_userptr_put drivers/media/v4l2-core/videobuf2-core.c:256 [inline]
 __vb2_free_mem drivers/media/v4l2-core/videobuf2-core.c:413 [inline]
 __vb2_queue_free+0x3a8/0x7d0 drivers/media/v4l2-core/videobuf2-core.c:454
kobject: 'loop5' (ffff8880a4b34960): fill_kobj_path: path = '/devices/virtual/block/loop5'
 vb2_core_queue_release+0x64/0x80 drivers/media/v4l2-core/videobuf2-core.c:2043
 vb2_queue_release drivers/media/v4l2-core/videobuf2-v4l2.c:669 [inline]
 _vb2_fop_release+0x1cf/0x2a0 drivers/media/v4l2-core/videobuf2-v4l2.c:840
 vb2_fop_release+0x75/0xc0 drivers/media/v4l2-core/videobuf2-v4l2.c:854
kobject: 'loop0p244' (ffff88805fe88c98): kobject_add_internal: parent: 'loop0', set: 'devices'
 vivid_fop_release+0x180/0x3f0 drivers/media/platform/vivid/vivid-core.c:486
 v4l2_release+0xf9/0x190 drivers/media/v4l2-core/v4l2-dev.c:446
 __fput+0x275/0x7a0 fs/file_table.c:210
 ____fput+0x16/0x20 fs/file_table.c:244
 task_work_run+0x114/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x1da/0x220 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4bc/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x413561
RSP: 002b:00007ffc82d9a150 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413561
RDX: 0000001b33820000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000001 R08: 0000000010745ce5 R09: 0000000010745ce9
R10: 00007ffc82d9a230 R11: 0000000000000293 R12: 000000000075bf20
R13: 0000000000034a79 R14: 0000000000760d08 R15: ffffffffffffffff
kobject: 'loop0p244' (ffff88805fe88c98): kobject_uevent_env
Code: 4c 89 fa 48 c1 ea 
kobject: 'loop0p244' (ffff88805fe88c98): kobject_uevent_env: uevent_suppress caused the event to drop!
03 80 3c 02 00 0f 85 8d 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 6c 24 08 49 8d 7d 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 3c 01 00 
RIP: vb2_vmalloc_put_userptr+0x6e/0x210 drivers/media/v4l2-core/videobuf2-vmalloc.c:136 RSP: ffff888052b0fc18
---[ end trace 241dd15f0c2cd660 ]---
kobject: 'holders' (ffff888092202400): kobject_add_internal: parent: 'loop0p244', set: '<NULL>'
kobject: 'loop1' (ffff8880a4a296a0): kobject_uevent_env
kobject: 'loop0p244' (ffff88805fe88c98): kobject_uevent_env