kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2094 Comm: syz-executor.3 Not tainted 4.9.194+ #0
task: 00000000677fe4bd task.stack: 00000000304a03a9
RIP: 0010:[<ffffffff81ae5d7a>]  [<000000000d8a76cc>] bdev_get_queue include/linux/blkdev.h:847 [inline]
RIP: 0010:[<ffffffff81ae5d7a>]  [<000000000d8a76cc>] blk_get_backing_dev_info+0x4a/0x70 block/blk-core.c:118
RSP: 0018:ffff8801a9c27820  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff10035384f35
RDX: 00000000000000a6 RSI: ffffffff81ae5d3d RDI: 0000000000000530
RBP: ffff8801a9c27828 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: ffffea000650d000
R13: ffff88016a2b2048 R14: ffff88016a2b1e50 R15: ffffffff833f1db8
FS:  0000000001a12940(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001a1b978 CR3: 00000001aa3ce000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Stack:
 ffff8801da49a200 ffff8801a9c27868 ffffffff8143e202 ffff88016a2b2048
 ffff88016a2b2048 ffffea000650d000 ffffea000650d020 ffff88016a2b2048
 0000000000000000 ffff8801a9c27898 ffffffff8144a790 dffffc0000000000
Call Trace:
 [<00000000330c27c7>] inode_to_bdi include/linux/backing-dev.h:186 [inline]
 [<00000000330c27c7>] mapping_cap_account_dirty include/linux/backing-dev.h:234 [inline]
 [<00000000330c27c7>] cancel_dirty_page+0x1a2/0x3d0 mm/page-writeback.c:2609
 [<000000004de6c9cd>] truncate_complete_page mm/truncate.c:126 [inline]
 [<000000004de6c9cd>] truncate_inode_page+0x130/0x260 mm/truncate.c:167
 [<00000000dee8f346>] truncate_inode_pages_range+0x20e/0xfe0 mm/truncate.c:291
 [<000000008c5dca9e>] truncate_inode_pages mm/truncate.c:401 [inline]
 [<000000008c5dca9e>] truncate_inode_pages_final+0x81/0xc0 mm/truncate.c:452
 [<000000003bee324e>] bdev_evict_inode+0x21/0x190 fs/block_dev.c:639
 [<000000004be35a41>] evict+0x2e9/0x630 fs/inode.c:553
 [<000000002cca5fdc>] iput_final fs/inode.c:1516 [inline]
 [<000000002cca5fdc>] iput fs/inode.c:1543 [inline]
 [<000000002cca5fdc>] iput+0x370/0x900 fs/inode.c:1528
 [<00000000f547c489>] bdput fs/block_dev.c:775 [inline]
 [<00000000f547c489>] bd_forget+0xf0/0x1a0 fs/block_dev.c:826
 [<000000003f5eada3>] evict+0x485/0x630 fs/inode.c:559
 [<000000002cca5fdc>] iput_final fs/inode.c:1516 [inline]
 [<000000002cca5fdc>] iput fs/inode.c:1543 [inline]
 [<000000002cca5fdc>] iput+0x370/0x900 fs/inode.c:1528
 [<0000000030bf369c>] dentry_unlink_inode+0x277/0x330 fs/dcache.c:369
 [<0000000028da2c3e>] __dentry_kill+0x333/0x580 fs/dcache.c:571
 [<0000000022965cd3>] dentry_kill fs/dcache.c:612 [inline]
 [<0000000022965cd3>] dput.part.0+0x5d9/0x7c0 fs/dcache.c:829
 [<00000000f67d48e5>] dput fs/dcache.c:791 [inline]
 [<00000000f67d48e5>] do_one_tree+0x44/0x50 fs/dcache.c:1483
 [<00000000fe851fa0>] shrink_dcache_for_umount+0x67/0x160 fs/dcache.c:1497
 [<000000003fe58dbe>] generic_shutdown_super+0x6d/0x300 fs/super.c:432
 [<00000000647a813b>] kill_anon_super+0x3f/0x60 fs/super.c:978
 [<0000000034f378d9>] fuse_kill_sb_anon+0x42/0x50 fs/fuse/inode.c:1223
 [<00000000afb4a0ff>] deactivate_locked_super+0x79/0xe0 fs/super.c:320
 [<0000000037e547ef>] deactivate_super fs/super.c:351 [inline]
 [<0000000037e547ef>] deactivate_super+0x8a/0xb0 fs/super.c:347
 [<000000005275efce>] cleanup_mnt+0xb2/0x160 fs/namespace.c:1143
 [<00000000ff825d74>] __cleanup_mnt+0x16/0x20 fs/namespace.c:1150
 [<00000000ea269256>] task_work_run+0x108/0x180 kernel/task_work.c:116
 [<00000000f0d2c032>] tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 [<00000000f0d2c032>] exit_to_usermode_loop+0x13b/0x160 arch/x86/entry/common.c:163
 [<00000000493b0d50>] prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 [<00000000493b0d50>] syscall_return_slowpath arch/x86/entry/common.c:266 [inline]
 [<00000000493b0d50>] do_syscall_64+0x3ab/0x5c0 arch/x86/entry/common.c:293
 [<00000000aac65027>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 89 fa 48 c1 ea 03 80 3c 02 00 75 35 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 17 48 8b 83 30 05 00 00 5b 5d 48 05 20 02 00 00 
RIP  [<000000000d8a76cc>] bdev_get_queue include/linux/blkdev.h:847 [inline]
RIP  [<000000000d8a76cc>] blk_get_backing_dev_info+0x4a/0x70 block/blk-core.c:118
 RSP <ffff8801a9c27820>
---[ end trace 2b2405ac9c3e0bae ]---