binder: 12398:12400 BC_ACQUIRE_DONE node 7 has no pending acquire request
binder: 12398:12400 got transaction to context manager from process owning it
list_add corruption. prev->next should be next (ffffffff8a1dca60), but was ffff8881b297cb70. (prev=ffff88818341e270).
binder: 12398:12400 transaction failed 29201/-22, size 0-0 line 2841
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 2950 Comm: kworker/0:2 Not tainted 4.20.0-rc6-next-20181210+ #164
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: rcu_gp process_srcu
RIP: 0010:__list_add_valid.cold.2+0x23/0x2a lib/list_debug.c:26
Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00
RSP: 0018:ffff8881dac06ce0 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005
RBP: ffff8881dac06cf8 R08: ffff8881cbefe580 R09: ffffed103b585020
binder: undelivered TRANSACTION_ERROR: 29201
R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881bc3406f0
R13: ffff8881bc340480 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0
FS:  0000000000000000(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1909b50000 CR3: 00000001c3363000 CR4: 00000000001406f0
kobject: 'loop5' (00000000f84a3bf4): kobject_uevent_env
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 neigh_alloc net/core/neighbour.c:395 [inline]
 ___neigh_create+0x14b7/0x2600 net/core/neighbour.c:553
kobject: 'loop5' (00000000f84a3bf4): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'loop2' (0000000048da5a35): kobject_uevent_env
kobject: 'loop2' (0000000048da5a35): fill_kobj_path: path = '/devices/virtual/block/loop2'
kobject: 'loop1' (000000005c4e3e5d): kobject_uevent_env
kobject: 'loop1' (000000005c4e3e5d): fill_kobj_path: path = '/devices/virtual/block/loop1'
 __neigh_create+0x30/0x40 net/core/neighbour.c:640
 ip6_finish_output2+0xa64/0x2940 net/ipv6/ip6_output.c:117
 ip6_finish_output+0x58c/0xc60 net/ipv6/ip6_output.c:154
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip6_output+0x232/0x9d0 net/ipv6/ip6_output.c:171
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ndisc_send_skb+0x1005/0x1560 net/ipv6/ndisc.c:491
 ndisc_send_rs+0x134/0x6e0 net/ipv6/ndisc.c:685
 addrconf_rs_timer+0x314/0x690 net/ipv6/addrconf.c:3840
 call_timer_fn+0x272/0x920 kernel/time/timer.c:1325
 expire_timers kernel/time/timer.c:1362 [inline]
 __run_timers+0x7e5/0xc70 kernel/time/timer.c:1681
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1694
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:rep_nop arch/x86/include/asm/processor.h:660 [inline]
RIP: 0010:delay_tsc+0x33/0xc0 arch/x86/lib/delay.c:67
Code: 89 fd bf 01 00 00 00 41 54 53 e8 58 5b 75 f9 e8 73 3f b3 fb 41 89 c6 0f ae e8 0f 31 48 c1 e2 20 48 09 c2 49 89 d4 eb 16 f3 90 <bf> 01 00 00 00 e8 33 5b 75 f9 e8 4e 3f b3 fb 44 39 f0 75 36 0f ae
RSP: 0018:ffff8881cbde72f0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 0000000080000000 RBX: 000000a95b18c4b9 RCX: 0000000000000000
RDX: 0000000000000004 RSI: ffffffff8393ea78 RDI: ffffffff8b30a8e0
RBP: ffff8881cbde7310 R08: ffff8881cbefe580 R09: 1ffffd1ffffa0d80
R10: ffff8881cbde7418 R11: ffffffff8b32a3a7 R12: 000000a95b18ab67
R13: 0000000000002ced R14: 0000000000000000 R15: ffffffff8b32a000
 __delay arch/x86/lib/delay.c:161 [inline]
 __const_udelay+0x62/0x80 arch/x86/lib/delay.c:175
 try_check_zero+0x384/0x5f0 kernel/rcu/srcutree.c:730
 srcu_advance_state kernel/rcu/srcutree.c:1167 [inline]
 process_srcu+0x641/0x980 kernel/rcu/srcutree.c:1261
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace 2a6bb0c4370ed354 ]---
RIP: 0010:__list_add_valid.cold.2+0x23/0x2a lib/list_debug.c:26
Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00
RSP: 0018:ffff8881dac06ce0 EFLAGS: 00010286
RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005
RBP: ffff8881dac06cf8 R08: ffff8881cbefe580 R09: ffffed103b585020
R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881bc3406f0
R13: ffff8881bc340480 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0
FS:  0000000000000000(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1909b50000 CR3: 00000001c3363000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400