binder: 6352:6355 BC_DEAD_BINDER_DONE 0080000200000007 not found
binder: undelivered death notification, 0000000000000000
audit: type=1400 audit(1539930149.419:29): avc:  denied  { ioctl } for  pid=6354 comm="syz-executor3" path="socket:[18817]" dev="sockfs" ino=18817 ioctlcmd=89ed scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:2462!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 60 Comm: kworker/u4:1 Not tainted 4.4.161+ #112
Workqueue: writeback wb_workfn (flush-8:0)
task: ffff8801d93f4740 task.stack: ffff8801d8cf0000
RIP: 0010:[<ffffffff816400d0>]  [<ffffffff816400d0>] mpage_prepare_extent_to_map+0x670/0x8e0 fs/ext4/inode.c:2462
RSP: 0018:ffff8801d8cf7330  EFLAGS: 00010293
RAX: ffff8801d93f4740 RBX: ffffea0006f822c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff816400d0 RDI: ffffea0006f822d0
RBP: ffff8801d8cf74e8 R08: ffff8801d93f5008 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8801d8cf7630
FS:  0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000a7e928 CR3: 00000000a8557000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 1ffff1003b19ee74 ffff8801d8cf73c0 ffff8801d8cf7638 ffff8801d8cf7640
 0000000081a2c650 ffffffffffffffff ffff8801d6457368 000000090000000c
 0000000000001c00 ffff8801d8cf7400 ffff8801d8cf7648 ffffed003b19eec7
Call Trace:
 [<ffffffff8164f32c>] ext4_writepages+0xd4c/0x2c20 fs/ext4/inode.c:2617
 [<ffffffff813d763f>] do_writepages+0xef/0x1d0 mm/page-writeback.c:2334
 [<ffffffff815200f1>] __writeback_single_inode+0x101/0x1340 fs/fs-writeback.c:1285
 [<ffffffff815217db>] writeback_sb_inodes+0x4ab/0xee0 fs/fs-writeback.c:1548
 [<ffffffff8152230b>] __writeback_inodes_wb+0xfb/0x1e0 fs/fs-writeback.c:1617
 [<ffffffff81522919>] wb_writeback+0x529/0xd00 fs/fs-writeback.c:1726
 [<ffffffff81525596>] wb_check_old_data_flush fs/fs-writeback.c:1841 [inline]
 [<ffffffff81525596>] wb_do_writeback fs/fs-writeback.c:1865 [inline]
 [<ffffffff81525596>] wb_workfn+0x966/0x1010 fs/fs-writeback.c:1894
 [<ffffffff81122cb4>] process_one_work+0x824/0x1670 kernel/workqueue.c:2064
 [<ffffffff81123bd9>] worker_thread+0xd9/0x1060 kernel/workqueue.c:2196
 [<ffffffff81134038>] kthread+0x268/0x300 kernel/kthread.c:211
 [<ffffffff82705fc5>] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:510
Code: 48 89 df e8 23 45 d7 ff e9 32 ff ff ff e8 49 6e cc ff 48 89 df e8 b1 5e d7 ff e9 fa fd ff ff e8 37 6e cc ff 0f 0b e8 30 6e cc ff <0f> 0b 31 c0 89 85 b0 fe ff ff e8 21 6e cc ff 8b 85 18 ff ff ff 
RIP  [<ffffffff816400d0>] mpage_prepare_extent_to_map+0x670/0x8e0 fs/ext4/inode.c:2462
 RSP <ffff8801d8cf7330>
binder: 6377:6391 BC_DEAD_BINDER_DONE 0080000200000007 not found
binder: undelivered death notification, 0000000000000000
binder: 6399:6404 BC_DEAD_BINDER_DONE 0080000200000007 not found
---[ end trace cbbe28569a073a82 ]---