binder: send failed reply for transaction 116, target dead
binder: send failed reply for transaction 118, target dead
BUG: unable to handle kernel paging request at 00000000873cc5d2
IP: lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002
PGD 5e28067 P4D 5e28067 PUD 5e2a067 PMD 0 
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 21387 Comm: syz-executor2 Not tainted 4.15.0-rc2-next-20171204+ #58
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: 000000002a6f2e48 task.stack: 000000003e42493c
RIP: 0010:lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002
RSP: 0018:ffff8801cf8d6e38 EFLAGS: 00010046
RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8801c24b8500 RSI: 0000000000000000 RDI: ffff8801c24b8d84
RBP: ffff8801cf8d6f30 R08: 0000000000000001 R09: 0000000000000000
R10: 1ffff10039f1adcd R11: 0000000000000000 R12: 1ffff10039f1adcd
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
FS:  00007f000002a700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffff8 CR3: 00000001c71f1000 CR4: 00000000001426e0
Call Trace:
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x96/0xc0 kernel/locking/spinlock.c:159
 deferred_split_huge_page+0x17c/0x590 mm/huge_memory.c:2750
 page_remove_rmap+0x81f/0xe90 mm/rmap.c:1318
 zap_pte_range mm/memory.c:1334 [inline]
 zap_pmd_range mm/memory.c:1438 [inline]
 zap_pud_range mm/memory.c:1467 [inline]
 zap_p4d_range mm/memory.c:1488 [inline]
 unmap_page_range+0xfc3/0x22e0 mm/memory.c:1509
 unmap_single_vma+0x15f/0x2d0 mm/memory.c:1554
 unmap_vmas+0xf1/0x1b0 mm/memory.c:1584
 unmap_region+0x2b9/0x4f0 mm/mmap.c:2511
 do_munmap+0x726/0xdf0 mm/mmap.c:2726
 mmap_region+0x59e/0x15a0 mm/mmap.c:1646
 do_mmap+0x6c6/0xe10 mm/mmap.c:1483
 do_mmap_pgoff include/linux/mm.h:2217 [inline]
 vm_mmap_pgoff+0x1de/0x280 mm/util.c:333
 SYSC_mmap_pgoff mm/mmap.c:1533 [inline]
 SyS_mmap_pgoff+0x23b/0x5f0 mm/mmap.c:1491
 SYSC_mmap arch/x86/kernel/sys_x86_64.c:100 [inline]
 SyS_mmap+0x16/0x20 arch/x86/kernel/sys_x86_64.c:91
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x4529d9
RSP: 002b:00007f0000029c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 00000000004529d9
RDX: 0000000000000003 RSI: 0000000000792000 RDI: 0000000020000000
RBP: 000000000000044f R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000032 R11: 0000000000000212 R12: 00000000006f3808
R13: 00000000ffffffff R14: 00007f000002a6d4 R15: 0000000000000001
Code: df 48 89 f9 48 c1 e9 03 0f b6 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 fe 02 00 00 c7 82 84 08 00 00 01 00 00 00 <cc> 1f 44 00 00 65 8b 05 c1 c7 aa 7e 89 c0 48 0f a3 05 07 5e 08 
RIP: lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002 RSP: ffff8801cf8d6e38
CR2: fffffffffffffff8
---[ end trace e39656860a2a64f9 ]---