RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
R13: 00007fff7570246f R14: 00007f8d5b9a2300 R15: 0000000000022000
warn_alloc_show_mem: 1 callbacks suppressed
Mem-Info:
kernel BUG at net/rxrpc/local_object.c:408!
CPU: 1 PID: 14857 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
active_anon:166701 inactive_anon:4702 isolated_anon:0
 active_file:868 inactive_file:7990 isolated_file:0
 unevictable:0 dirty:58 writeback:0 unstable:0
 slab_reclaimable:12616 slab_unreclaimable:119638
 mapped:31390 shmem:4895 pagetables:1335 bounce:0
 free:110208 free_pcp:204 free_cma:0
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 warn_alloc.cold+0x96/0x1cc mm/page_alloc.c:3255
 __alloc_pages_slowpath mm/page_alloc.c:4102 [inline]
 __alloc_pages_nodemask+0x2127/0x2720 mm/page_alloc.c:4205
Node 0 active_anon:666184kB inactive_anon:18808kB active_file:2224kB inactive_file:25272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117272kB dirty:228kB writeback:0kB shmem:19580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 124928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 alloc_pages_current+0x155/0x260 mm/mempolicy.c:2113
 alloc_pages include/linux/gfp.h:520 [inline]
 ion_page_pool_alloc_pages drivers/staging/android/ion/ion_page_pool.c:30 [inline]
 ion_page_pool_alloc+0x118/0x1b0 drivers/staging/android/ion/ion_page_pool.c:89
 alloc_buffer_page drivers/staging/android/ion/ion_system_heap.c:75 [inline]
 alloc_largest_available drivers/staging/android/ion/ion_system_heap.c:115 [inline]
 ion_system_heap_allocate+0x133/0x8c0 drivers/staging/android/ion/ion_system_heap.c:146
Node 1 active_anon:620kB inactive_anon:0kB active_file:1248kB inactive_file:6688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8288kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 ion_buffer_create drivers/staging/android/ion/ion.c:94 [inline]
 ion_alloc+0x204/0x810 drivers/staging/android/ion/ion.c:425
 ion_ioctl+0xea/0x1f0 drivers/staging/android/ion/ion-ioctl.c:87
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
Node 0 
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
DMA free:11104kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:496kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x465f69
RSP: 002b:00007f5958abb188 EFLAGS: 00000246
lowmem_reserve[]:
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69
RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003
RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
R13: 00007ffc42907b6f R14: 00007f5958abb300 R15: 0000000000022000
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2928 Comm: kworker/u4:4 Not tainted 4.14.225-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
task: ffff8880ac2ae440 task.stack: ffff8880ac3b8000
RIP: 0010:rxrpc_destroy_all_locals+0xe6/0x100 net/rxrpc/local_object.c:408
RSP: 0018:ffff8880ac3bfc28 EFLAGS: 00010286
RAX: dffffc0000000000 RBX: ffff888050cb0c00 RCX: fffffbfff17d6ba8
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000286
RBP: ffff888050cb0c20 R08: ffff8880ac2ae440 R09: dffffc0000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888050cb0c20
R13: ffff888050cb0c30 R14: dffffc0000000000 R15: fffffbfff13c288f
FS:  0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff59ff60020 CR3: 00000000a5535000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 rxrpc_exit_net+0x158/0x260 net/rxrpc/net_ns.c:78
 ops_exit_list+0xa5/0x150 net/core/net_namespace.c:142
 cleanup_net+0x3b3/0x840 net/core/net_namespace.c:484
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 0
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 2717
 2718 2718
 kthread+0x30d/0x420 kernel/kthread.c:232
 2718
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 
00 00 00 00 00 fc ff df 48 83 eb 20 e8 34 c3 d8 fa 4c 8d 63 20 4c 39 e5 0f 85 0e 45 a0 00 e8 22 c3 d8 fa 4c 89 ef e8 8a 0d a4 00 <0f> 0b 48 89 ef e8 50 4b 02 fb eb c0 90 90 90 90 90 90 90 90 90 
Node 0 
RIP: rxrpc_destroy_all_locals+0xe6/0x100 net/rxrpc/local_object.c:408 RSP: ffff8880ac3bfc28
DMA32 free:204956kB min:36200kB low:45248kB high:54296kB active_anon:666172kB inactive_anon:18808kB active_file:2224kB inactive_file:24776kB unevictable:0kB writepending:228kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:5144kB bounce:0kB free_pcp:208kB local_pcp:112kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
---[ end trace 83e49f54288045a7 ]---