syzbot


android-4.9 boot error: general protection fault in ion_heap_destroy

Status: internal: reported on 2019/02/11 09:33
Fix commit: 270fbfb501f1 ANDROID: ion_dummy_driver: Remove SYSTEM_CONTIG heap
Patched on: [ci-android-49-kasan-gce-root], missing on: [ci-android-49-kasan-gce ci-android-49-kasan-gce-386]
First crash: 1896d, last: 1855d

Sample crash report:
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
ion_heap_create: Heap type is disabled: 1
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.9.164+ #22
task: ffff8801da5f8000 task.stack: ffff8801da600000
RIP: 0010:[<ffffffff821e77f2>]  [<ffffffff821e77f2>] ion_heap_destroy+0x32/0xd0 drivers/staging/android/ion/ion_heap.c:363
RSP: 0000:ffff8801da607db0  EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000000000
RDX: 0000000000000003 RSI: ffffffff821e77dc RDI: 000000000000001a
RBP: ffff8801da607dc0 R08: ffff8801da607b20 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffffffffea
R13: ffff8801d6291878 R14: dffffc0000000000 R15: ffffffffffffffea
FS:  0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000003022000 CR4: 00000000001606b0
Stack:
 dffffc0000000000 ffffffffffffffea ffff8801da607df8 ffffffff83497347
 1ffff1003b4c0fc2 ffffffff8349703d 0000000000000000 dffffc0000000000
 ffff8801da607eb0 ffff8801da607ed8 ffffffff81000501 ffff8801da607e48
Call Trace:
 [<ffffffff83497347>] ion_dummy_init+0x30a/0x3b6 drivers/staging/android/ion/ion_dummy_driver.c:118
 [<ffffffff81000501>] do_one_initcall+0xb1/0x1c0 init/main.c:780
 [<ffffffff8341ac7b>] do_initcall_level init/main.c:846 [inline]
 [<ffffffff8341ac7b>] do_initcalls init/main.c:854 [inline]
 [<ffffffff8341ac7b>] do_basic_setup init/main.c:872 [inline]
 [<ffffffff8341ac7b>] kernel_init_freeable+0x2ff/0x3c3 init/main.c:1018
 [<ffffffff827f551f>] kernel_init+0x12/0x163 init/main.c:946
 [<ffffffff82807edc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Code: 89 fc 48 83 ec 08 e8 de 45 13 ff 4d 85 e4 74 53 e8 d4 45 13 ff 49 8d 7c 24 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 83 00 00 00 41 8b 54 24 30 
RIP  [<ffffffff821e77f2>] ion_heap_destroy+0x32/0xd0 drivers/staging/android/ion/ion_heap.c:363
 RSP <ffff8801da607db0>
---[ end trace 5ae1cee72cf23c26 ]---

Crashes (729):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/21 16:15 https://android.googlesource.com/kernel/common android-4.9 47d813fc5799 dce6e62f .config console log report ci-android-49-kasan-gce
2019/03/21 05:13 https://android.googlesource.com/kernel/common android-4.9 47d813fc5799 427ea487 .config console log report ci-android-49-kasan-gce
2019/03/21 04:14 https://android.googlesource.com/kernel/common android-4.9 47d813fc5799 427ea487 .config console log report ci-android-49-kasan-gce-root
2019/03/20 15:00 https://android.googlesource.com/kernel/common android-4.9 26fad52fa044 a664c187 .config console log report ci-android-49-kasan-gce-root
2019/03/20 14:49 https://android.googlesource.com/kernel/common android-4.9 26fad52fa044 a664c187 .config console log report ci-android-49-kasan-gce
2019/03/20 13:22 https://android.googlesource.com/kernel/common android-4.9 26fad52fa044 a664c187 .config console log report ci-android-49-kasan-gce
2019/03/20 11:33 https://android.googlesource.com/kernel/common android-4.9 26fad52fa044 142c38ee .config console log report ci-android-49-kasan-gce
2019/03/20 00:33 https://android.googlesource.com/kernel/common android-4.9 26fad52fa044 2458c1c6 .config console log report ci-android-49-kasan-gce-root
2019/03/19 15:06 https://android.googlesource.com/kernel/common android-4.9 26fad52fa044 e4549234 .config console log report ci-android-49-kasan-gce
2019/03/19 12:17 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 e4549234 .config console log report ci-android-49-kasan-gce
2019/03/19 00:26 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 46264c32 .config console log report ci-android-49-kasan-gce-root
2019/03/18 12:11 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 4656beca .config console log report ci-android-49-kasan-gce
2019/03/18 12:11 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 4656beca .config console log report ci-android-49-kasan-gce
2019/03/17 11:05 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 ba18afea .config console log report ci-android-49-kasan-gce-root
2019/03/15 08:43 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 bab43553 .config console log report ci-android-49-kasan-gce-root
2019/03/14 18:50 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 d72db19b .config console log report ci-android-49-kasan-gce-root
2019/03/14 06:35 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 d09a902e .config console log report ci-android-49-kasan-gce
2019/03/13 22:37 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 2881fc25 .config console log report ci-android-49-kasan-gce
2019/03/13 16:08 https://android.googlesource.com/kernel/common android-4.9 fe250948bddc 2881fc25 .config console log report ci-android-49-kasan-gce
2019/03/13 16:08 https://android.googlesource.com/kernel/common android-4.9 fe250948bddc 2881fc25 .config console log report ci-android-49-kasan-gce
2019/03/12 13:58 https://android.googlesource.com/kernel/common android-4.9 fe250948bddc a71bfb62 .config console log report ci-android-49-kasan-gce-root
2019/03/12 13:58 https://android.googlesource.com/kernel/common android-4.9 fe250948bddc a71bfb62 .config console log report ci-android-49-kasan-gce-root
2019/03/08 22:40 https://android.googlesource.com/kernel/common android-4.9 fe250948bddc 12365b99 .config console log report ci-android-49-kasan-gce
2019/03/08 08:49 https://android.googlesource.com/kernel/common android-4.9 3f33df2b52b0 12365b99 .config console log report ci-android-49-kasan-gce
2019/03/08 02:10 https://android.googlesource.com/kernel/common android-4.9 3f33df2b52b0 4b69c3cb .config console log report ci-android-49-kasan-gce
2019/03/07 22:36 https://android.googlesource.com/kernel/common android-4.9 2f0bc4bcd59e 4b69c3cb .config console log report ci-android-49-kasan-gce
2019/03/07 20:47 https://android.googlesource.com/kernel/common android-4.9 2f0bc4bcd59e 4b69c3cb .config console log report ci-android-49-kasan-gce-root
2019/03/07 08:55 https://android.googlesource.com/kernel/common android-4.9 2f0bc4bcd59e 8c085c5e .config console log report ci-android-49-kasan-gce-root
2019/03/06 23:55 https://android.googlesource.com/kernel/common android-4.9 9cca4066aa2a 18215b8d .config console log report ci-android-49-kasan-gce-root
2019/03/06 22:54 https://android.googlesource.com/kernel/common android-4.9 74634f3504e5 18215b8d .config console log report ci-android-49-kasan-gce-root
2019/03/06 21:07 https://android.googlesource.com/kernel/common android-4.9 3a8e785fdd04 18215b8d .config console log report ci-android-49-kasan-gce
2019/03/06 18:48 https://android.googlesource.com/kernel/common android-4.9 3a8e785fdd04 05cf83bf .config console log report ci-android-49-kasan-gce-root
2019/03/06 15:38 https://android.googlesource.com/kernel/common android-4.9 ff99b0fc76a1 05cf83bf .config console log report ci-android-49-kasan-gce-root
2019/03/06 08:48 https://android.googlesource.com/kernel/common android-4.9 f5f87ecac1cf 05cf83bf .config console log report ci-android-49-kasan-gce-root
2019/02/08 20:00 https://android.googlesource.com/kernel/common android-4.9 04667090d09b fa6c7b70 .config console log report ci-android-49-kasan-gce-root
2019/03/20 22:27 https://android.googlesource.com/kernel/common android-4.9 47d813fc5799 a664c187 .config console log report ci-android-49-kasan-gce-386
2019/03/19 12:05 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 e4549234 .config console log report ci-android-49-kasan-gce-386
2019/03/14 19:14 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 d72db19b .config console log report ci-android-49-kasan-gce-386
2019/03/13 22:55 https://android.googlesource.com/kernel/common android-4.9 429c144a84c6 2881fc25 .config console log report ci-android-49-kasan-gce-386
2019/03/08 01:47 https://android.googlesource.com/kernel/common android-4.9 3f33df2b52b0 4b69c3cb .config console log report ci-android-49-kasan-gce-386
2019/03/07 23:36 https://android.googlesource.com/kernel/common android-4.9 c3983c9134dd 4b69c3cb .config console log report ci-android-49-kasan-gce-386
2019/03/07 01:51 https://android.googlesource.com/kernel/common android-4.9 2f0bc4bcd59e 18215b8d .config console log report ci-android-49-kasan-gce-386
2019/03/07 01:51 https://android.googlesource.com/kernel/common android-4.9 2f0bc4bcd59e 18215b8d .config console log report ci-android-49-kasan-gce-386
2019/03/06 20:30 https://android.googlesource.com/kernel/common android-4.9 3a8e785fdd04 18215b8d .config console log report ci-android-49-kasan-gce-386
2019/03/06 15:50 https://android.googlesource.com/kernel/common android-4.9 ff99b0fc76a1 05cf83bf .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.