audit: type=1400 audit(1568031797.378:1745): avc:  denied  { write } for  pid=14832 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
INFO: task syz-executor.2:11362 blocked for more than 140 seconds.
      Not tainted 4.4.174+ #17
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D ffff8800b4f3fb10 30048 11362  11361 0x20020000
 ffff8800b4f3fb10 ffffffff811ff385 0000000000000292 ffffffff84076a08
 ffff8800b4f3fac0 0000000000000200 ffff8801db61f180 ffff8801db61f1a8
 ffff8801db61e898 ffff8801d4ed5f00 ffff8801d81c0000 ffffed00169e7001
Call Trace:
 [<ffffffff82709b79>] schedule+0x99/0x1d0 kernel/sched/core.c:3355
 [<ffffffff82715c4b>] schedule_timeout+0x47b/0x7c0 kernel/time/timer.c:1515
 [<ffffffff8270b455>] do_wait_for_common kernel/sched/completion.c:75 [inline]
 [<ffffffff8270b455>] __wait_for_common kernel/sched/completion.c:93 [inline]
 [<ffffffff8270b455>] wait_for_common+0x2b5/0x530 kernel/sched/completion.c:101
 [<ffffffff8270b6e8>] wait_for_completion+0x18/0x20 kernel/sched/completion.c:122
 [<ffffffff81583bb1>] SYSC_io_destroy fs/aio.c:1396 [inline]
 [<ffffffff81583bb1>] SyS_io_destroy+0x2c1/0x350 fs/aio.c:1374
 [<ffffffff8100603d>] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
 [<ffffffff8100603d>] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397
 [<ffffffff8271a350>] sysenter_flags_fixed+0xd/0x1a
no locks held by syz-executor.2/11362.
Sending NMI to all CPUs:
NMI backtrace for cpu 0
CPU: 0 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #17
task: ffff8801da6f4740 task.stack: ffff8800001d0000
RIP: 0010:[<ffffffff8109b617>]  [<ffffffff8109b617>] _flat_send_IPI_mask arch/x86/kernel/apic/apic_flat_64.c:62 [inline]
RIP: 0010:[<ffffffff8109b617>]  [<ffffffff8109b617>] flat_send_IPI_mask+0xf7/0x1b0 arch/x86/kernel/apic/apic_flat_64.c:69
RSP: 0018:ffff8800001d7c88  EFLAGS: 00000046
RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000
RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300
RBP: ffff8800001d7cb8 R08: 0000000000000018 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246
R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000625208 CR3: 00000000bab6b000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34
 000000000001b6c0 0000000000000008 ffff8800001d7cd8 ffffffff81092bee
 0000000000000008 ffffffff82924260 ffff8800001d7d30 ffffffff81ab8252
Call Trace:
 [<ffffffff81092bee>] nmi_raise_cpu_backtrace+0x5e/0x80 arch/x86/kernel/apic/hw_nmi.c:33
 [<ffffffff81ab8252>] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae lib/nmi_backtrace.c:85
 [<ffffffff81092ca4>] arch_trigger_all_cpu_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 [<ffffffff813b4762>] trigger_all_cpu_backtrace include/linux/nmi.h:44 [inline]
 [<ffffffff813b4762>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff813b4762>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff813b4762>] watchdog.cold+0xd3/0xee kernel/hung_task.c:238
 [<ffffffff811342c3>] kthread+0x273/0x310 kernel/kthread.c:211
 [<ffffffff82718fc5>] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:537
Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 
NMI backtrace for cpu 1
CPU: 1 PID: 14857 Comm: blkid Not tainted 4.4.174+ #17
task: ffff8801cf8e8000 task.stack: ffff8800a4378000
RIP: 0010:[<ffffffff811fdaf5>]  [<ffffffff811fdaf5>] mark_lock+0x35/0x1440 kernel/locking/lockdep.c:2900
RSP: 0018:ffff8800a437fa80  EFLAGS: 00000002
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 1ffff10039f1d11d RSI: ffff8801cf8e88c8 RDI: ffff8801cf8e8000
RBP: ffff8800a437faa0 R08: 0000000000000003 R09: ffff8801cf8e88e8
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cf8e88c8
R13: ffff8801cf8e8000 R14: 0000000000000004 R15: 0000000000000002
FS:  00007fdbe716d740(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdbe6a7abe0 CR3: 00000000b65f3000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801cf8e88c8 0000000000000002 ffff8801cf8e8000 dffffc0000000000
 ffff8800a437fae8 ffffffff811fefb1 ffff8801cf8e88c0 00000003a437fb38
 ffff8801cf8e8000 ffffffff8271802a 0000000000000202 0000000000000081
Call Trace:
 [<ffffffff811fefb1>] mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2536
 [<ffffffff811ff260>] __trace_hardirqs_on_caller kernel/locking/lockdep.c:2557 [inline]
 [<ffffffff811ff260>] trace_hardirqs_on_caller+0x260/0x5a0 kernel/locking/lockdep.c:2612
 [<ffffffff811ff5ad>] trace_hardirqs_on+0xd/0x10 kernel/locking/lockdep.c:2619
 [<ffffffff8271802a>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline]
 [<ffffffff8271802a>] _raw_spin_unlock_irqrestore+0x5a/0x70 kernel/locking/spinlock.c:191
 [<ffffffff8195365c>] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline]
 [<ffffffff8195365c>] avc_reclaim_node security/selinux/avc.c:541 [inline]
 [<ffffffff8195365c>] avc_alloc_node security/selinux/avc.c:559 [inline]
 [<ffffffff8195365c>] avc_alloc_node+0x31c/0x3c0 security/selinux/avc.c:547
 [<ffffffff81954992>] avc_insert security/selinux/avc.c:670 [inline]
 [<ffffffff81954992>] avc_compute_av+0x182/0x610 security/selinux/avc.c:976
 [<ffffffff81956338>] avc_has_perm_noaudit+0x2a8/0x300 security/selinux/avc.c:1112
 [<ffffffff8196f916>] cred_has_capability.isra.0+0x106/0x250 security/selinux/hooks.c:1576
 [<ffffffff8196fac8>] selinux_vm_enough_memory+0x68/0x90 security/selinux/hooks.c:2146
 [<ffffffff8194bf17>] security_vm_enough_memory_mm+0x77/0xc0 security/security.c:230
 [<ffffffff81446d60>] do_brk+0x380/0x930 mm/mmap.c:2873
 [<ffffffff8144759d>] SYSC_brk mm/mmap.c:353 [inline]
 [<ffffffff8144759d>] SyS_brk+0x28d/0x430 mm/mmap.c:298
 [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
Code: 00 00 00 00 fc ff df 48 89 e5 41 57 41 89 d7 4c 89 ca 41 56 48 c1 ea 03 41 be 01 00 00 00 41 55 41 d3 e6 49 89 fd 41 54 49 89 f4 <53> 48 83 ec 20 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 68 08 00 00 
input: syz1 as /devices/virtual/input/input48