I tried to mount -o remount,rw /vendor on android P with user-debug build, and I got the feedback 'failed to mount /vendor, /dev/block/dm-5 is read only'.
I searched and it looks like dm-verity is in effect, so I tried the following cmd:
adb root
adb disable-verity //if this cmd failed, you need try 'adb reboot bootloader->fastboot flashing unlock'
adb reboot
adb disable-verity
adb reboot
Now, it still didn't work.
Then I tried to disable selinux in uboot. It worked.