binder: 4018:4036 Acquire 1 refcount change on invalid ref 1 ret -22
binder: 4018:4036 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4
binder: 4018:4036 got reply transaction with no transaction stack
binder: 4018:4036 transaction failed 29201/-71, size 96-32 line 2747
BUG: unable to handle kernel paging request at 00000000d6f242b3
IP: lock_release+0x195/0xda0 kernel/locking/lockdep.c:4021
PGD 5e28067 P4D 5e28067 PUD 5e2a067 PMD 0 
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 1596 Comm: udevd Not tainted 4.15.0-rc1-next-20171201+ #57
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: 0000000041bc65b2 task.stack: 00000000d99fe0e9
RIP: 0010:lock_release+0x195/0xda0 kernel/locking/lockdep.c:4021
RSP: 0018:ffff8801d03ef8a0 EFLAGS: 00010046
RAX: 0000000000000007 RBX: 1ffff1003a07df19 RCX: ffffffff81d0c468
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801d03e4b04
RBP: ffff8801d03efa10 R08: 0000000000000002 R09: 0000000000000005
R10: 0000000000000000 R11: ffffffff8748cd60 R12: ffff8801d03e4280
R13: ffff8801d03ef9e8 R14: ffff8801d5ebc6a0 R15: ffff8801d03e4280
FS:  00007f721732a7a0(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffff8 CR3: 00000001d0f5e000 CR4: 00000000001426f0
Call Trace:
 kernfs_put_active+0xda/0x120 fs/kernfs/dir.c:441
 kernfs_seq_stop_active+0xbe/0x100 fs/kernfs/file.c:100
 kernfs_seq_stop+0x51/0x70 fs/kernfs/file.c:158
 seq_read+0x597/0x13d0 fs/seq_file.c:256
 kernfs_fop_read+0x455/0x610 fs/kernfs/file.c:252
 __vfs_read+0xef/0xa00 fs/read_write.c:411
 vfs_read+0x124/0x360 fs/read_write.c:447
 SYSC_read fs/read_write.c:573 [inline]
 SyS_read+0xef/0x220 fs/read_write.c:566
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x7f7216a31310
RSP: 002b:00007ffde90c4858 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f7216a31310
RDX: 0000000000001000 RSI: 00007f721732f000 RDI: 000000000000000b
RBP: 00000000019cc710 R08: 0000000000000001 R09: 0000000000000000
R10: 1999999999999999 R11: 0000000000000246 R12: 00007ffde90c8da9
R13: 0000000000000008 R14: 0000000000000008 R15: 00007ffde90c8da8
Code: 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 c4 08 00 00 41 c7 87 84 08 00 00 01 00 00 00 <cc> 1f 44 00 00 65 8b 05 3f d7 aa 7e 89 c0 48 0f a3 05 c5 6c 08 
RIP: lock_release+0x195/0xda0 kernel/locking/lockdep.c:4021 RSP: ffff8801d03ef8a0
CR2: fffffffffffffff8
---[ end trace 2325d814369ffa65 ]---