syzbot
kernel panic: n_tty: init_tty
Status:
fixed on 2018/05/08 18:30
Subsystems:
serial
[Documentation on labels]
Reported-by: syzbot+57840b4d2cc5c46981d5b9e07c9b7b06d5bcf064@syzkaller.appspotmail.com
Fix commit:
903f9db10f18
tty: Don't call panic() at tty_ldisc_init()
First crash: 3288d, last: 3020d
Sample crash report:
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004404b9
RDX: 0000000000004000 RSI: 00000000204aeff6 RDI: ffffffffffffff9c
RBP: 0000000000000006 R08: 0000000000000001 R09: 00007fffce210037
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: ffffffffffffffff R14: 6d74702f7665642f R15: 0000000000000004
Kernel panic - not syncing: n_tty: init_tty
CPU: 1 PID: 3157 Comm: syzkaller832190 Not tainted 4.15.0-rc5+ #240
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x194/0x257 lib/dump_stack.c:53
panic+0x1e4/0x41c kernel/panic.c:183
tty_ldisc_init+0x69/0x70 drivers/tty/tty_ldisc.c:831
alloc_tty_struct+0x18b/0xa20 drivers/tty/tty_io.c:2802
tty_init_dev+0x78/0x4a0 drivers/tty/tty_io.c:1308
ptmx_open+0xf3/0x310 drivers/tty/pty.c:832
chrdev_open+0x257/0x730 fs/char_dev.c:417
do_dentry_open+0x667/0xd40 fs/open.c:752
vfs_open+0x107/0x220 fs/open.c:866
do_last fs/namei.c:3379 [inline]
path_openat+0x1151/0x3530 fs/namei.c:3519
do_filp_open+0x25b/0x3b0 fs/namei.c:3554
do_sys_open+0x502/0x6d0 fs/open.c:1059
SYSC_openat fs/open.c:1086 [inline]
SyS_openat+0x30/0x40 fs/open.c:1080
entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x4404b9
RSP: 002b:00007fffce2101a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004404b9
RDX: 0000000000004000 RSI: 00000000204aeff6 RDI: ffffffffffffff9c
RBP: 0000000000000006 R08: 0000000000000001 R09: 00007fffce210037
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: ffffffffffffffff R14: 6d74702f7665642f R15: 0000000000000004
Dumping ftrace buffer:
(ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..
* Struck through repros no longer work on HEAD.