binder: 9725:9726 got reply transaction with no transaction stack
binder: 9725:9726 transaction failed 29201/-71, size 0-0 line 2759
binder: 9727:9729 got reply transaction with no transaction stack
binder: 9727:9729 transaction failed 29201/-71, size 0-0 line 2759
==================================================================
BUG: KASAN: stack-out-of-bounds in __list_add_valid+0x8f/0xb0 lib/list_debug.c:26
Read of size 8 at addr ffff880191a72510 by task udevd/12095
CPU: 1 PID: 12095 Comm: udevd Not tainted 4.18.0-rc4+ #138
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
print_address_description+0x6c/0x20b mm/kasan/report.c:256
kasan_report_error mm/kasan/report.c:354 [inline]
kasan_report.cold.7+0x242/0x2fe mm/kasan/report.c:412
__asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
__list_add_valid+0x8f/0xb0 lib/list_debug.c:26
__list_add_rcu include/linux/rculist.h:52 [inline]
list_add_tail_rcu+0x97/0x200 include/linux/rculist.h:101
copy_process.part.39+0x4246/0x7220 kernel/fork.c:1954
PANIC: double fault, error_code: 0x0
CPU: 0 PID: 9718 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:mark_lock+0x46/0x19f0 kernel/locking/lockdep.c:3118
Code: 00
00 00
41 56
41 d3
e7 41
55 4c
8d 6e
20 41
54 49
89 f4
53 48
8d
9d f8
fe ff
ff 48
c1 eb
03 48
8d 04
13 48
81 ec
08 01
00 00
<48> c7
85 f8
fe ff
ff b3
8a b5
41 48
c7 85
00 ff
ff ff
70 6f
bd 88
copy_process kernel/fork.c:1616 [inline]
_do_fork+0x291/0x12a0 kernel/fork.c:2099
RSP: 0018:ffff88018d7fff70 EFLAGS: 00010082
RAX: ffffed0031affff3 RBX: 1ffff10031affff3 RCX: 0000000000000008
RDX: dffffc0000000000 RSI: ffff880193832a20 RDI: ffff8801938321c0
RBP: ffff88018d8000a0 R08: 0000000000000008 R09: 0000000000000001
R10: ffff8801938321c0 R11: ffff8801938329e4 R12: ffff880193832a20
R13: ffff880193832a40 R14: ffff8801938321c0 R15: 0000000000000100
FS: 0000000000d51940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88018d7fff68 CR3: 00000001ae8d6000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000020000180 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
__do_sys_clone kernel/fork.c:2206 [inline]
__se_sys_clone kernel/fork.c:2200 [inline]
__x64_sys_clone+0xbf/0x150 kernel/fork.c:2200
Call Trace: