binder: 6352:6355 BC_DEAD_BINDER_DONE 0080000200000007 not found binder: undelivered death notification, 0000000000000000 audit: type=1400 audit(1539930149.419:29): avc: denied { ioctl } for pid=6354 comm="syz-executor3" path="socket:[18817]" dev="sockfs" ino=18817 ioctlcmd=89ed scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 ------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2462! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 60 Comm: kworker/u4:1 Not tainted 4.4.161+ #112 Workqueue: writeback wb_workfn (flush-8:0) task: ffff8801d93f4740 task.stack: ffff8801d8cf0000 RIP: 0010:[] [] mpage_prepare_extent_to_map+0x670/0x8e0 fs/ext4/inode.c:2462 RSP: 0018:ffff8801d8cf7330 EFLAGS: 00010293 RAX: ffff8801d93f4740 RBX: ffffea0006f822c0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff816400d0 RDI: ffffea0006f822d0 RBP: ffff8801d8cf74e8 R08: ffff8801d93f5008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8801d8cf7630 FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000a7e928 CR3: 00000000a8557000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 1ffff1003b19ee74 ffff8801d8cf73c0 ffff8801d8cf7638 ffff8801d8cf7640 0000000081a2c650 ffffffffffffffff ffff8801d6457368 000000090000000c 0000000000001c00 ffff8801d8cf7400 ffff8801d8cf7648 ffffed003b19eec7 Call Trace: [] ext4_writepages+0xd4c/0x2c20 fs/ext4/inode.c:2617 [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2334 [] __writeback_single_inode+0x101/0x1340 fs/fs-writeback.c:1285 [] writeback_sb_inodes+0x4ab/0xee0 fs/fs-writeback.c:1548 [] __writeback_inodes_wb+0xfb/0x1e0 fs/fs-writeback.c:1617 [] wb_writeback+0x529/0xd00 fs/fs-writeback.c:1726 [] wb_check_old_data_flush fs/fs-writeback.c:1841 [inline] [] wb_do_writeback fs/fs-writeback.c:1865 [inline] [] wb_workfn+0x966/0x1010 fs/fs-writeback.c:1894 [] process_one_work+0x824/0x1670 kernel/workqueue.c:2064 [] worker_thread+0xd9/0x1060 kernel/workqueue.c:2196 [] kthread+0x268/0x300 kernel/kthread.c:211 [] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:510 Code: 48 89 df e8 23 45 d7 ff e9 32 ff ff ff e8 49 6e cc ff 48 89 df e8 b1 5e d7 ff e9 fa fd ff ff e8 37 6e cc ff 0f 0b e8 30 6e cc ff <0f> 0b 31 c0 89 85 b0 fe ff ff e8 21 6e cc ff 8b 85 18 ff ff ff RIP [] mpage_prepare_extent_to_map+0x670/0x8e0 fs/ext4/inode.c:2462 RSP binder: 6377:6391 BC_DEAD_BINDER_DONE 0080000200000007 not found binder: undelivered death notification, 0000000000000000 binder: 6399:6404 BC_DEAD_BINDER_DONE 0080000200000007 not found ---[ end trace cbbe28569a073a82 ]---