binder: 16191:16194 unknown command 6756102
binder: 16191:16194 ioctl c0306201 20007000 returned -22
==================================================================
BUG: KASAN: out-of-bounds in unwind_next_frame+0xcd/0xe0 arch/x86/kernel/unwind_frame.c:51
Read of size 8 at addr ffff8801c54e78d0 by task syz-executor7/16202

CPU: 1 PID: 16202 Comm: syz-executor7 Not tainted 4.9.116-g52be322 #21
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801b297f898 ffffffff81eb46a9 ffffea00071539c0 ffff8801c54e78d0
 0000000000000000 ffff8801c54e78d8 ffff8801a6be9140 ffff8801b297f8d0
 ffffffff81567d49 ffff8801c54e78d0 0000000000000008 0000000000000000
Call Trace:
 [<ffffffff81eb46a9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb46a9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81567d49>] print_address_description+0x6c/0x234 mm/kasan/report.c:256
 [<ffffffff81568153>] kasan_report_error mm/kasan/report.c:355 [inline]
 [<ffffffff81568153>] kasan_report.cold.6+0x242/0x2fe mm/kasan/report.c:412
 [<ffffffff8153bcd4>] __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
 [<ffffffff810d2ead>] unwind_next_frame+0xcd/0xe0 arch/x86/kernel/unwind_frame.c:51
 [<ffffffff8107b9cd>] __save_stack_trace+0x7d/0xf0 arch/x86/kernel/stacktrace.c:42
 [<ffffffff8107baa8>] save_stack_trace_tsk+0x48/0x70 arch/x86/kernel/stacktrace.c:71
 [<ffffffff816d7be8>] proc_pid_stack+0x148/0x220 fs/proc/base.c:469
 [<ffffffff816d92dd>] proc_single_show+0xfd/0x170 fs/proc/base.c:771
 [<ffffffff815ed5d6>] seq_read+0x4b6/0x12e0 fs/seq_file.c:240
 [<ffffffff81571065>] __vfs_read+0x115/0x570 fs/read_write.c:449
 [<ffffffff81572830>] vfs_read+0x120/0x380 fs/read_write.c:472
 [<ffffffff81576c75>] SYSC_pread64 fs/read_write.c:626 [inline]
 [<ffffffff81576c75>] SyS_pread64+0x145/0x170 fs/read_write.c:613
 [<ffffffff8111aca9>] sys32_pread+0x39/0x50 arch/x86/ia32/sys_ia32.c:179
 [<ffffffff81006da7>] do_syscall_32_irqs_on arch/x86/entry/common.c:325 [inline]
 [<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870 arch/x86/entry/common.c:387
 [<ffffffff839fd310>] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137

The buggy address belongs to the page:
page:ffffea00071539c0 count:0 mapcount:0 mapping:          (null) index:0x0
flags: 0x8000000000000000()
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff8801c54e7780: 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 00 00
 ffff8801c54e7800: f2 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1
>ffff8801c54e7880: f1 f1 00 00 04 f2 00 00 00 00 00 00 00 00 00 00
                                                    ^
 ffff8801c54e7900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff8801c54e7980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1
==================================================================