==================================================================
BUG: KASAN: stack-out-of-bounds in pid_alive include/linux/sched.h:1271 [inline]
BUG: KASAN: stack-out-of-bounds in __task_pid_nr_ns+0x5ad/0x620 kernel/pid.c:423
Read of size 8 at addr ffff880197ca0648 by task syz-executor4/4451
CPU: 1 PID: 4451 Comm: syz-executor4 Not tainted 4.18.0-rc3+ #48
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
print_address_description+0x6c/0x20b mm/kasan/report.c:256
kasan_report_error mm/kasan/report.c:354 [inline]
kasan_report.cold.7+0x242/0x2fe mm/kasan/report.c:412
__asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
PANIC: double fault, error_code: 0x0
pid_alive include/linux/sched.h:1271 [inline]
__task_pid_nr_ns+0x5ad/0x620 kernel/pid.c:423
CPU: 0 PID: 14002 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #48
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:trace_event_get_offsets_lock_acquire include/trace/events/lock.h:13 [inline]
RIP: 0010:perf_trace_lock_acquire+0xe6/0x9a0 include/trace/events/lock.h:13
Code: 18
48 89
85
task_pid_vnr include/linux/sched.h:1250 [inline]
wait_task_zombie kernel/exit.c:1054 [inline]
wait_consider_task+0x1402/0x39b0 kernel/exit.c:1388
70 fe
ff ff
48 c1
e8 03
80 3c
10 00
0f 85
8a 05
00 00
49 8b
79 18
48 85
ff 0f
84 72
04 00
do_wait_thread kernel/exit.c:1451 [inline]
do_wait+0x477/0xb80 kernel/exit.c:1522
00 4c
89 8d
58 fe
ff ff
<e8> 35
d6 33
06 4c
8b 8d
kernel_wait4+0x247/0x3f0 kernel/exit.c:1665
58 fe
ff ff
41 89
__do_sys_wait4+0x137/0x150 kernel/exit.c:1677
c6 83
c0 01
c1 e0
10 83
RSP: 0018:ffff880191dfffd8 EFLAGS: 00010086
__se_sys_wait4 kernel/exit.c:1673 [inline]
__x64_sys_wait4+0x97/0xf0 kernel/exit.c:1673
RAX: 1ffffffff11f24c7 RBX: 1ffff100323c0005 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffffff88f92620 RDI: ffffffff87ebd260
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
RBP: ffff880191e001b0 R08: 0000000000000002 R09: ffffffff88f92620
R10: ffffffff815dfe10 R11: dffffc0000000000 R12: ffff880191e00188
R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88f7b740
FS: 0000000000c5b940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff880191dfffc8 CR3: 00000001d836d000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace: