syzbot


kernel panic: n_tty: init_tty

Status: fixed on 2018/05/08 18:30
Reported-by: syzbot+57840b4d2cc5c46981d5b9e07c9b7b06d5bcf064@syzkaller.appspotmail.com
Fix commit: 903f9db10f18 tty: Don't call panic() at tty_ldisc_init()
First crash: 1939d, last: 1671d

Sample crash report:
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004404b9
RDX: 0000000000004000 RSI: 00000000204aeff6 RDI: ffffffffffffff9c
RBP: 0000000000000006 R08: 0000000000000001 R09: 00007fffce210037
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: ffffffffffffffff R14: 6d74702f7665642f R15: 0000000000000004
Kernel panic - not syncing: n_tty: init_tty
CPU: 1 PID: 3157 Comm: syzkaller832190 Not tainted 4.15.0-rc5+ #240
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 panic+0x1e4/0x41c kernel/panic.c:183
 tty_ldisc_init+0x69/0x70 drivers/tty/tty_ldisc.c:831
 alloc_tty_struct+0x18b/0xa20 drivers/tty/tty_io.c:2802
 tty_init_dev+0x78/0x4a0 drivers/tty/tty_io.c:1308
 ptmx_open+0xf3/0x310 drivers/tty/pty.c:832
 chrdev_open+0x257/0x730 fs/char_dev.c:417
 do_dentry_open+0x667/0xd40 fs/open.c:752
 vfs_open+0x107/0x220 fs/open.c:866
 do_last fs/namei.c:3379 [inline]
 path_openat+0x1151/0x3530 fs/namei.c:3519
 do_filp_open+0x25b/0x3b0 fs/namei.c:3554
 do_sys_open+0x502/0x6d0 fs/open.c:1059
 SYSC_openat fs/open.c:1086 [inline]
 SyS_openat+0x30/0x40 fs/open.c:1080
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x4404b9
RSP: 002b:00007fffce2101a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004404b9
RDX: 0000000000004000 RSI: 00000000204aeff6 RDI: ffffffffffffff9c
RBP: 0000000000000006 R08: 0000000000000001 R09: 00007fffce210037
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: ffffffffffffffff R14: 6d74702f7665642f R15: 0000000000000004
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (141):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2017/12/29 08:31 upstream 2758b3e3e630 7d240098 .config log report syz C
ci-upstream-kasan-gce 2018/04/27 04:54 upstream 0644f186fc9d 73417389 .config log report
ci-upstream-kasan-gce-root 2018/04/27 02:37 upstream 0644f186fc9d 73417389 .config log report
ci-upstream-kasan-gce 2018/04/21 12:57 upstream 83beed7b2b26 d23fcf6c .config log report
ci-upstream-kasan-gce 2018/04/20 17:24 upstream 43f70c960180 cc402841 .config log report
ci-upstream-kasan-gce 2018/04/12 02:27 upstream b284d4d5a678 9cd56d71 .config log report
ci-upstream-kasan-gce 2018/04/11 21:59 upstream b284d4d5a678 9cd56d71 .config log report
ci-upstream-kasan-gce-root 2018/04/11 10:20 upstream b284d4d5a678 8b8de427 .config log report
ci-upstream-kasan-gce-root 2018/04/10 21:54 upstream c18bb396d3d2 8b8de427 .config log report
ci-upstream-kasan-gce 2018/04/07 14:02 upstream 3fd14cdcc05a 66f22a7f .config log report
ci-upstream-kasan-gce-root 2018/04/05 15:12 upstream 06dd3dfeea60 5e1ccffc .config log report
ci-upstream-kasan-gce 2018/04/03 09:21 upstream 642e7fd23353 676bd07e .config log report
ci-upstream-kasan-gce-root 2018/04/01 22:35 upstream 0adb32858b0b dc889257 .config log report
ci-upstream-kasan-gce-root 2018/04/01 04:55 upstream 10b84daddbec 0174c6c8 .config log report
ci-upstream-kasan-gce 2018/03/31 10:36 upstream b5dbc28762fd 8fbce0e4 .config log report
ci-upstream-kasan-gce 2018/03/31 06:41 upstream 9dd2326890d8 8fbce0e4 .config log report
ci-upstream-kasan-gce 2018/03/31 04:41 upstream 9dd2326890d8 8fbce0e4 .config log report
ci-upstream-kasan-gce 2018/03/31 00:48 upstream 9dd2326890d8 8fbce0e4 .config log report
ci-upstream-kasan-gce 2018/03/30 22:14 upstream 9dd2326890d8 8fbce0e4 .config log report
ci-upstream-kasan-gce-root 2018/03/30 19:05 upstream 9dd2326890d8 8fbce0e4 .config log report
ci-upstream-kasan-gce 2018/03/30 17:01 upstream c2a9838452a4 d47f0ed6 .config log report
ci-upstream-kasan-gce 2018/03/30 06:19 upstream c2a9838452a4 d47f0ed6 .config log report
ci-upstream-kasan-gce 2018/03/29 23:10 upstream 0b412605ef5f d47f0ed6 .config log report
ci-upstream-kasan-gce-root 2018/03/29 20:45 upstream 0b412605ef5f d47f0ed6 .config log report
ci-upstream-kasan-gce-386 2018/04/10 12:57 upstream f2d285669aae 8e873e9d .config log report
ci-upstream-kasan-gce-386 2018/04/08 18:40 upstream f2d285669aae 77bd5117 .config log report
ci-upstream-kasan-gce-386 2018/03/31 15:35 upstream b5dbc28762fd 8fbce0e4 .config log report
ci-upstream-kasan-gce-386 2018/03/31 13:28 upstream b5dbc28762fd 8fbce0e4 .config log report
ci-upstream-kasan-gce-386 2018/03/30 14:25 upstream c2a9838452a4 d47f0ed6 .config log report
ci-upstream-kasan-gce-386 2018/03/30 13:13 upstream c2a9838452a4 d47f0ed6 .config log report
ci-upstream-kasan-gce-386 2018/03/30 03:30 upstream 0b412605ef5f d47f0ed6 .config log report
ci-upstream-kasan-gce-386 2018/03/30 01:45 upstream 0b412605ef5f d47f0ed6 .config log report
ci-upstream-kasan-gce-386 2018/03/29 19:04 upstream 0b412605ef5f d47f0ed6 .config log report
ci-upstream-kmsan-gce 2018/05/08 11:02 https://github.com/google/kmsan.git master d2d741e5d189 045bbd4a .config log report
ci-upstream-kmsan-gce 2018/04/28 08:15 https://github.com/google/kmsan.git master d2d741e5d189 d5a5d045 .config log report
ci-upstream-kmsan-gce 2018/04/25 12:59 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config log report
ci-upstream-kmsan-gce 2018/04/25 09:56 https://github.com/google/kmsan.git master d2d741e5d189 73417389 .config log report
ci-upstream-kmsan-gce 2018/04/24 18:18 https://github.com/google/kmsan.git master d2d741e5d189 37e76fe2 .config log report
ci-upstream-kmsan-gce 2018/04/21 15:10 https://github.com/google/kmsan.git master a7f95e9c8a95 d23fcf6c .config log report
ci-upstream-next-kasan-gce 2018/01/07 02:55 linux-next 990b6a07d18c 19c05fff .config log report
ci-upstream-mmots-kasan-gce 2017/12/02 11:22 mmots 4131d5166185 29b0fd90 .config log report
skylake-linux-next-kasan-qemu 2017/11/17 12:30 linux-next ee92513eae01 2f7fc0ff .config log report
* Struck through repros no longer work on HEAD.