binder: 9725:9726 got reply transaction with no transaction stack
binder: 9725:9726 transaction failed 29201/-71, size 0-0 line 2759
binder: 9727:9729 got reply transaction with no transaction stack
binder: 9727:9729 transaction failed 29201/-71, size 0-0 line 2759
==================================================================
BUG: KASAN: stack-out-of-bounds in __list_add_valid+0x8f/0xb0 lib/list_debug.c:26
Read of size 8 at addr ffff880191a72510 by task udevd/12095

CPU: 1 PID: 12095 Comm: udevd Not tainted 4.18.0-rc4+ #138
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
 print_address_description+0x6c/0x20b mm/kasan/report.c:256
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report.cold.7+0x242/0x2fe mm/kasan/report.c:412
 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
 __list_add_valid+0x8f/0xb0 lib/list_debug.c:26
 __list_add_rcu include/linux/rculist.h:52 [inline]
 list_add_tail_rcu+0x97/0x200 include/linux/rculist.h:101
 copy_process.part.39+0x4246/0x7220 kernel/fork.c:1954
PANIC: double fault, error_code: 0x0
CPU: 0 PID: 9718 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:mark_lock+0x46/0x19f0 kernel/locking/lockdep.c:3118
Code: 00 
00 00 
41 56 
41 d3 
e7 41 
55 4c 
8d 6e 
20 41 
54 49 
89 f4 
53 48 
8d 
9d f8 
fe ff 
ff 48 
c1 eb 
03 48 
8d 04 
13 48 
81 ec 
08 01 
00 00 
<48> c7 
85 f8 
fe ff 
ff b3 
8a b5 
41 48 
c7 85 
00 ff 
ff ff 
70 6f 
bd 88 
 copy_process kernel/fork.c:1616 [inline]
 _do_fork+0x291/0x12a0 kernel/fork.c:2099
RSP: 0018:ffff88018d7fff70 EFLAGS: 00010082
RAX: ffffed0031affff3 RBX: 1ffff10031affff3 RCX: 0000000000000008
RDX: dffffc0000000000 RSI: ffff880193832a20 RDI: ffff8801938321c0
RBP: ffff88018d8000a0 R08: 0000000000000008 R09: 0000000000000001
R10: ffff8801938321c0 R11: ffff8801938329e4 R12: ffff880193832a20
R13: ffff880193832a40 R14: ffff8801938321c0 R15: 0000000000000100
FS:  0000000000d51940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88018d7fff68 CR3: 00000001ae8d6000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000020000180 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
 __do_sys_clone kernel/fork.c:2206 [inline]
 __se_sys_clone kernel/fork.c:2200 [inline]
 __x64_sys_clone+0xbf/0x150 kernel/fork.c:2200
Call Trace: