syzbot
panic: Most recently used by tty
Status:
fixed on 2019/07/05 06:10
Reported-by: syzbot+c9b6206303bf47bac87e@syzkaller.appspotmail.com
Fix commit:
6a01874c5afa
Defer funsetown() calls for a TTY to tty_rel_free().
First crash: 2659d, last: 2645d
Sample crash report:
panic: Most recently used by tty
cpuid = 0
time = 1558234948
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe002109f690
vpanic() at vpanic+0x1e0/frame 0xfffffe002109f6f0
panic() at panic+0x43/frame 0xfffffe002109f750
mtrash_ctor() at mtrash_ctor+0xed/frame 0xfffffe002109f790
uma_zalloc_arg() at uma_zalloc_arg+0x1036/frame 0xfffffe002109f840
malloc() at malloc+0xe1/frame 0xfffffe002109f8b0
tty_alloc_mutex() at tty_alloc_mutex+0x22c/frame 0xfffffe002109f8e0
pts_alloc() at pts_alloc+0x179/frame 0xfffffe002109f930
sys_posix_openpt() at sys_posix_openpt+0x94/frame 0xfffffe002109f970
ia32_syscall() at ia32_syscall+0x452/frame 0xfffffe002109fab0
int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xa
KDB: enter: panic
[ thread pid 788 tid 100116 ]
Stopped at kdb_enter+0x6a: movq $0,kdb_why
* Struck through repros no longer work on HEAD.