kernel crash in Binder driver

[Rajyashree Bhogbanda]

Hello,

I am working on a custom project with Lollipop and 3.8 kernel. I have observed kernel crashes from binder driver.
The crashes are always observed in the deferred path, When the process dies.

Scenario: system idle

1) binder_delete_ref in list_del()

2) binder_deferred_release BUG():
Under what scenarios can this BUG be encountered? Is there an alternative to this, So that the kernel crash can be prevented?

3) binder_deferred_release : if (list_empty(&ref->death->work.entry)) {
                                        ref->death->work.type = BINDER_WORK_DEAD_BINDER;
                                        list_add_tail(&ref->death->work.entry, &ref->proc->todo);
                                         }
                                         else
                                          BUG(); -----> (2)

Any help would be appreciated.

Thanks and Regards,
Rajyashree