binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29201
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 6753 Comm: syz-executor4 Not tainted 4.15.0-rc5+ #147
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline]
RIP: 0010:compound_head include/linux/page-flags.h:147 [inline]
RIP: 0010:page_mapping+0xa4/0x530 mm/util.c:475
RSP: 0018:ffff8801c1b27060 EFLAGS: 00010202
RAX: 0000000000000004 RBX: 1ffff10038364e0d RCX: ffffffff8194af1d
RDX: 0000000000000569 RSI: ffffc90002bc4000 RDI: 0000000000000000
RBP: ffff8801c1b271b0 R08: ffffed00386e9692 R09: ffff8801c374b470
R10: ffff8801d64e9b18 R11: ffffed00386e9691 R12: 0000000000000000
R13: ffff8801c1b27188 R14: dffffc0000000000 R15: 0000000000000020
FS:  0000000000000000(0000) GS:ffff8801db400000(0063) knlGS:00000000f777bb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000020b7cf44 CR3: 00000001c3add006 CR4: 00000000001626f0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 set_page_dirty+0xb9/0x5d0 mm/page-writeback.c:2544
 rds_atomic_free_op+0xc2/0x330 net/rds/rdma.c:481
 rds_message_purge net/rds/message.c:79 [inline]
 rds_message_put+0x53c/0x6b0 net/rds/message.c:91
 rds_sendmsg+0x14ee/0x1f90 net/rds/send.c:1204
 sock_sendmsg_nosec net/socket.c:636 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:646
 ___sys_sendmsg+0x320/0x8b0 net/socket.c:2026
 __sys_sendmmsg+0x31b/0x620 net/socket.c:2109
 C_SYSC_sendmmsg net/compat.c:745 [inline]
 compat_SyS_sendmmsg+0x32/0x40 net/compat.c:742
 do_syscall_32_irqs_on arch/x86/entry/common.c:327 [inline]
 do_fast_syscall_32+0x3ee/0xf9d arch/x86/entry/common.c:389
 entry_SYSENTER_compat+0x54/0x63 arch/x86/entry/entry_64_compat.S:125
RIP: 0023:0xf7fa0c79
RSP: 002b:00000000f777b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000159
RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000020573000
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: f2 f2 f2 c7 40 14 00 f2 f2 f2 c7 40 18 f2 f2 f2 f2 c7 40 1c 00 f2 f2 f2 c7 40 20 f3 f3 f3 f3 e8 93 3c db ff 4c 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 3c 04 00 00 4d 8d b5 00 ff ff ff 48 ba 00 
RIP: __read_once_size include/linux/compiler.h:183 [inline] RSP: ffff8801c1b27060
RIP: compound_head include/linux/page-flags.h:147 [inline] RSP: ffff8801c1b27060
RIP: page_mapping+0xa4/0x530 mm/util.c:475 RSP: ffff8801c1b27060
---[ end trace 6d19f6e975c3041d ]---
netlink: 1 bytes leftover after parsing attributes in process `syz-executor6'.
netlink: 1 bytes leftover after parsing attributes in process `syz-executor6'.
netlink: 1 bytes leftover after parsing attributes in process `syz-executor6'.