binder: 18488:18491 transaction failed 29201/-1, size 24-8 line 2975
binder_alloc: binder_alloc_mmap_handler: 18488 20000000-20002000 already mapped failed -16
binder: BINDER_SET_CONTEXT_MGR already set
binder: 18488:18491 ioctl 40046207 0 returned -16
BUG: unable to handle kernel paging request at 000000008df93ef4
IP: virt_to_head_page include/linux/mm.h:615 [inline]
IP: qlink_to_cache mm/kasan/quarantine.c:127 [inline]
IP: qlist_free_all+0x12b/0x160 mm/kasan/quarantine.c:163
PGD 0 P4D 0 
Oops: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 18496 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #115
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: 000000008af1d225 task.stack: 000000005bd97e97
RIP: 0010:virt_to_head_page include/linux/mm.h:615 [inline]
RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:127 [inline]
RIP: 0010:qlist_free_all+0x12b/0x160 mm/kasan/quarantine.c:163
RSP: 0000:ffff8801c11bf578 EFLAGS: 00010286
RAX: 0000000100000005 RBX: 0000000000000286 RCX: ffffea0000000000
RDX: ffffebe004000000 RSI: ffff8801d7a26df8 RDI: 0000000000000286
RBP: ffff8801c11bf5b0 R08: 1ffff10038237e7d R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000100000005 R15: ffffffff85ecb440
FS:  0000000000000000(0000) GS:ffff8801db400000(0063) knlGS:00000000098c6900
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: ffffebe004000020 CR3: 00000001c5939000 CR4: 00000000001426f0
Call Trace:
 quarantine_reduce+0x141/0x170 mm/kasan/quarantine.c:259
 kasan_kmalloc+0xca/0xe0 mm/kasan/kasan.c:536
 kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:489
 slab_post_alloc_hook mm/slab.h:442 [inline]
 slab_alloc mm/slab.c:3385 [inline]
 kmem_cache_alloc+0x11b/0x760 mm/slab.c:3545
 ptlock_alloc+0x24/0x70 mm/memory.c:4685
 ptlock_init include/linux/mm.h:1790 [inline]
 pgtable_page_ctor include/linux/mm.h:1824 [inline]
 pte_alloc_one+0x59/0x100 arch/x86/mm/pgtable.c:32
 __do_huge_pmd_anonymous_page mm/huge_memory.c:564 [inline]
 do_huge_pmd_anonymous_page+0x554/0x1b00 mm/huge_memory.c:728
 create_huge_pmd mm/memory.c:3828 [inline]
 __handle_mm_fault+0x1b9f/0x3e20 mm/memory.c:4031
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1094
RIP: 0023:0x804a5e5
RSP: 002b:000000000847f8f0 EFLAGS: 00010246
RAX: 00000000204be000 RBX: 0000000000000000 RCX: 0000000000200002
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: 00 00 00 80 48 01 c2 72 44 48 b9 00 00 00 80 ff 77 00 00 48 01 ca 48 b9 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 ca <48> 8b 4a 20 48 8d 71 ff 83 e1 01 48 0f 45 d6 4c 8b 6a 30 e9 f4 
RIP: virt_to_head_page include/linux/mm.h:615 [inline] RSP: ffff8801c11bf578
RIP: qlink_to_cache mm/kasan/quarantine.c:127 [inline] RSP: ffff8801c11bf578
RIP: qlist_free_all+0x12b/0x160 mm/kasan/quarantine.c:163 RSP: ffff8801c11bf578
CR2: ffffebe004000020
---[ end trace a3a3188e4dd149b5 ]---