QAT: Invalid ioctl
binder: undelivered TRANSACTION_ERROR: 29189
BUG: unable to handle kernel paging request at 000000001f26940a
IP: lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002
PGD 5e28067 P4D 5e28067 PUD 5e2a067 PMD 0 
Oops: 0002 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 11921 Comm: syz-executor2 Not tainted 4.15.0-rc1-mm1+ #29
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: 0000000055472bd5 task.stack: 00000000ee2f9010
RIP: 0010:lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002
RSP: 0018:ffff8801db506dd8 EFLAGS: 00010046
RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8801c30f8200 RSI: 0000000000000000 RDI: ffff8801c30f8a84
RBP: ffff8801db506ed0 R08: 0000000000000000 R09: 0000000000000000
R10: 1ffff1003b6a0dc1 R11: 0000000000000003 R12: 1ffff1003b6a0dc1
R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000
FS:  00007ff5b882a700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffff8 CR3: 00000001c79ff000 CR4: 00000000001426e0
Call Trace:
 <IRQ>
 rcu_lock_acquire include/linux/rcupdate.h:244 [inline]
 rcu_read_lock include/linux/rcupdate.h:630 [inline]
 nf_hook include/linux/netfilter.h:197 [inline]
 NF_HOOK include/linux/netfilter.h:248 [inline]
 ip6_input+0x158/0x560 net/ipv6/ip6_input.c:327
 dst_input include/net/dst.h:466 [inline]
 ip6_rcv_finish+0x1a9/0x7a0 net/ipv6/ip6_input.c:71
 NF_HOOK include/linux/netfilter.h:250 [inline]
 ipv6_rcv+0xf1f/0x1f80 net/ipv6/ip6_input.c:208
 __netif_receive_skb_core+0x1a3e/0x3450 net/core/dev.c:4461
 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4526
 process_backlog+0x203/0x740 net/core/dev.c:5205
 napi_poll net/core/dev.c:5603 [inline]
 net_rx_action+0x792/0x1910 net/core/dev.c:5669
 __do_softirq+0x29d/0xbb2 kernel/softirq.c:285
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1120
 </IRQ>
 do_softirq.part.19+0x14d/0x190 kernel/softirq.c:329
 do_softirq kernel/softirq.c:177 [inline]
 __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:182
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:726 [inline]
 ip6_finish_output2+0xb26/0x2310 net/ipv6/ip6_output.c:121
 ip6_finish_output+0x2f9/0x920 net/ipv6/ip6_output.c:146
 NF_HOOK_COND include/linux/netfilter.h:239 [inline]
 ip6_output+0x1eb/0x840 net/ipv6/ip6_output.c:163
 dst_output include/net/dst.h:460 [inline]
 NF_HOOK include/linux/netfilter.h:250 [inline]
 ip6_xmit+0xf2f/0x1f90 net/ipv6/ip6_output.c:261
 sctp_v6_xmit+0x438/0x630 net/sctp/ipv6.c:225
 sctp_packet_transmit+0x2258/0x3750 net/sctp/output.c:637
 sctp_outq_flush+0x1216/0x4050 net/sctp/outqueue.c:1191
 sctp_outq_uncork+0x5a/0x70 net/sctp/outqueue.c:772
 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1351 [inline]
 sctp_side_effects net/sctp/sm_sideeffect.c:1222 [inline]
 sctp_do_sm+0x4c61/0x6a30 net/sctp/sm_sideeffect.c:1193
 sctp_primitive_ABORT+0xa0/0xd0 net/sctp/primitive.c:119
 sctp_close+0x28b/0x980 net/sctp/socket.c:1561
 inet_release+0xed/0x1c0 net/ipv4/af_inet.c:426
 inet6_release+0x50/0x70 net/ipv6/af_inet6.c:433
 sock_release+0x8d/0x1e0 net/socket.c:596
 sock_close+0x16/0x20 net/socket.c:1125
 __fput+0x333/0x7f0 fs/file_table.c:210
 ____fput+0x15/0x20 fs/file_table.c:244
 task_work_run+0x199/0x270 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0x9bb/0x1ae0 kernel/exit.c:869
 do_group_exit+0x149/0x400 kernel/exit.c:972
 get_signal+0x73f/0x16c0 kernel/signal.c:2335
 do_signal+0x94/0x1ee0 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0x214/0x310 arch/x86/entry/common.c:158
 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 syscall_return_slowpath+0x490/0x550 arch/x86/entry/common.c:264
 entry_SYSCALL_64_fastpath+0x94/0x96
RIP: 0033:0x4529d9
RSP: 002b:00007ff5b8829ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 0000000000758048 RCX: 00000000004529d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000758048
RBP: 0000000000758048 R08: 000000000000045b R09: 0000000000758020
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000a6f7ff R14: 00007ff5b882a9c0 R15: 0000000000000000
Code: df 48 89 f9 48 c1 e9 03 0f b6 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 fe 02 00 00 c7 82 84 08 00 00 01 00 00 00 <cc> 06 01 00 00 65 8b 05 41 c8 aa 7e 89 c0 48 0f a3 05 47 61 08 
RIP: lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002 RSP: ffff8801db506dd8
CR2: fffffffffffffff8
---[ end trace d2768ebb72010a06 ]---