audit: type=1400 audit(1575206381.269:540): avc:  denied  { read } for  pid=8056 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
audit: type=1400 audit(1575206381.269:541): avc:  denied  { create } for  pid=8056 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
audit: type=1400 audit(1575206381.279:542): avc:  denied  { write } for  pid=8056 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2220 Comm: syz-executor.0 Not tainted 4.9.205-syzkaller #0
task: 00000000a5961873 task.stack: 00000000e8a35761
RIP: 0010:[<ffffffff81ad4b0a>]  [<00000000be77b0f2>] bdev_get_queue include/linux/blkdev.h:852 [inline]
RIP: 0010:[<ffffffff81ad4b0a>]  [<00000000be77b0f2>] blk_get_backing_dev_info+0x4a/0x70 block/blk-core.c:119
RSP: 0018:ffff8801a4c87820  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff10034990f35
RDX: 00000000000000a6 RSI: ffffffff81ad4acd RDI: 0000000000000530
RBP: ffff8801a4c87828 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: ffffea000643be80
R13: ffff8801da015408 R14: ffff8801da015210 R15: ffffffff833f10f8
FS:  0000000000d1e940(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000184ecbd CR3: 00000001ade02000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801da49a200 ffff8801a4c87868 ffffffff8143e262 ffff8801da015408
 ffff8801da015408 ffffea000643be80 ffffea000643bea0 ffff8801da015408
 0000000000000000 ffff8801a4c87898 ffffffff8144a7f0 dffffc0000000000
Call Trace:
 [<0000000000381e6a>] inode_to_bdi include/linux/backing-dev.h:186 [inline]
 [<0000000000381e6a>] mapping_cap_account_dirty include/linux/backing-dev.h:234 [inline]
 [<0000000000381e6a>] cancel_dirty_page+0x1a2/0x3d0 mm/page-writeback.c:2606
 [<000000009b2fe471>] truncate_complete_page mm/truncate.c:126 [inline]
 [<000000009b2fe471>] truncate_inode_page+0x130/0x260 mm/truncate.c:167
 [<00000000ec6af863>] truncate_inode_pages_range+0x20e/0xfe0 mm/truncate.c:291
 [<0000000010aee3e0>] truncate_inode_pages mm/truncate.c:401 [inline]
 [<0000000010aee3e0>] truncate_inode_pages_final+0x81/0xc0 mm/truncate.c:452
 [<00000000c5113b71>] bdev_evict_inode+0x21/0x190 fs/block_dev.c:639
 [<00000000561a7043>] evict+0x2e9/0x630 fs/inode.c:553
 [<00000000e14499a8>] iput_final fs/inode.c:1516 [inline]
 [<00000000e14499a8>] iput fs/inode.c:1543 [inline]
 [<00000000e14499a8>] iput+0x370/0x900 fs/inode.c:1528
 [<000000004d7e83ba>] bdput fs/block_dev.c:775 [inline]
 [<000000004d7e83ba>] bd_forget+0xf0/0x1a0 fs/block_dev.c:826
 [<0000000067ade6c6>] evict+0x485/0x630 fs/inode.c:559
 [<00000000e14499a8>] iput_final fs/inode.c:1516 [inline]
 [<00000000e14499a8>] iput fs/inode.c:1543 [inline]
 [<00000000e14499a8>] iput+0x370/0x900 fs/inode.c:1528
 [<0000000008b248d3>] dentry_unlink_inode+0x277/0x330 fs/dcache.c:368
 [<0000000065b98d39>] __dentry_kill+0x333/0x580 fs/dcache.c:570
 [<000000006e3601fb>] dentry_kill fs/dcache.c:611 [inline]
 [<000000006e3601fb>] dput.part.0+0x5d9/0x7c0 fs/dcache.c:828
 [<0000000046a1168e>] dput fs/dcache.c:790 [inline]
 [<0000000046a1168e>] do_one_tree+0x44/0x50 fs/dcache.c:1482
 [<000000003d0e52d9>] shrink_dcache_for_umount+0x67/0x160 fs/dcache.c:1496
 [<000000006db32b8c>] generic_shutdown_super+0x6d/0x300 fs/super.c:432
 [<000000009bf5a478>] kill_anon_super+0x3f/0x60 fs/super.c:978
 [<000000006a1a4a73>] fuse_kill_sb_anon+0x42/0x50 fs/fuse/inode.c:1223
 [<000000009746b0a8>] deactivate_locked_super+0x79/0xe0 fs/super.c:320
 [<000000006d953ed1>] deactivate_super fs/super.c:351 [inline]
 [<000000006d953ed1>] deactivate_super+0x8a/0xb0 fs/super.c:347
 [<00000000da5eb75a>] cleanup_mnt+0xb2/0x160 fs/namespace.c:1143
 [<00000000d7106547>] __cleanup_mnt+0x16/0x20 fs/namespace.c:1150
 [<000000009edfcc8e>] task_work_run+0x108/0x180 kernel/task_work.c:116
 [<0000000033ce6403>] tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 [<0000000033ce6403>] exit_to_usermode_loop+0x13b/0x160 arch/x86/entry/common.c:163
 [<000000007bfd938e>] prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 [<000000007bfd938e>] syscall_return_slowpath arch/x86/entry/common.c:266 [inline]
 [<000000007bfd938e>] do_syscall_64+0x3ab/0x5c0 arch/x86/entry/common.c:293
 [<000000008958a423>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 89 fa 48 c1 ea 03 80 3c 02 00 75 35 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 17 48 8b 83 30 05 00 00 5b 5d 48 05 20 02 00 00 
RIP  [<00000000be77b0f2>] bdev_get_queue include/linux/blkdev.h:852 [inline]
RIP  [<00000000be77b0f2>] blk_get_backing_dev_info+0x4a/0x70 block/blk-core.c:119
 RSP <ffff8801a4c87820>
---[ end trace 50c9b10111900242 ]---