linux-kernel - kernel panic: n_tty: init

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Fri, 29 Dec 2017 00:32:01 -0800
From:   syzbot 
        <syzbot+57840b4d2cc5c46981d5b9e07c9b7b06d5bcf064@...kaller.appspotmail.com>
To:     dvyukov@...gle.com, ebiggers3@...il.com,
        gnomes@...rguk.ukuu.org.uk, gregkh@...uxfoundation.org,
        jslaby@...e.com, linux-kernel@...r.kernel.org,
        syzkaller-bugs@...glegroups.com
Subject: kernel panic: n_tty: init_tty

syzkaller has found reproducer for the following crash on  
2758b3e3e630ba304fc4aca434d591e70e528298
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/master
compiler: gcc (GCC) 7.1.1 20170620
.config is attached
Raw console output is attached.
C reproducer is attached
syzkaller reproducer is attached. See https://goo.gl/kgGztJ
for information about syzkaller reproducers


IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by:  
syzbot+57840b4d2cc5c46981d5b9e07c9b7b06d5bcf064@...kaller.appspotmail.com
It will help syzbot understand when the bug is fixed.

RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004404b9
RDX: 0000000000004000 RSI: 00000000204aeff6 RDI: ffffffffffffff9c
RBP: 0000000000000006 R08: 0000000000000001 R09: 00007fffce210037
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: ffffffffffffffff R14: 6d74702f7665642f R15: 0000000000000004
Kernel panic - not syncing: n_tty: init_tty
CPU: 1 PID: 3157 Comm: syzkaller832190 Not tainted 4.15.0-rc5+ #240
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS  
Google 01/01/2011
Call Trace:
  __dump_stack lib/dump_stack.c:17 [inline]
  dump_stack+0x194/0x257 lib/dump_stack.c:53
  panic+0x1e4/0x41c kernel/panic.c:183
  tty_ldisc_init+0x69/0x70 drivers/tty/tty_ldisc.c:831
  alloc_tty_struct+0x18b/0xa20 drivers/tty/tty_io.c:2802
  tty_init_dev+0x78/0x4a0 drivers/tty/tty_io.c:1308
  ptmx_open+0xf3/0x310 drivers/tty/pty.c:832
  chrdev_open+0x257/0x730 fs/char_dev.c:417
  do_dentry_open+0x667/0xd40 fs/open.c:752
  vfs_open+0x107/0x220 fs/open.c:866
  do_last fs/namei.c:3379 [inline]
  path_openat+0x1151/0x3530 fs/namei.c:3519
  do_filp_open+0x25b/0x3b0 fs/namei.c:3554
  do_sys_open+0x502/0x6d0 fs/open.c:1059
  SYSC_openat fs/open.c:1086 [inline]
  SyS_openat+0x30/0x40 fs/open.c:1080
  entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x4404b9
RSP: 002b:00007fffce2101a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004404b9
RDX: 0000000000004000 RSI: 00000000204aeff6 RDI: ffffffffffffff9c
RBP: 0000000000000006 R08: 0000000000000001 R09: 00007fffce210037
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: ffffffffffffffff R14: 6d74702f7665642f R15: 0000000000000004
Dumping ftrace buffer:
    (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..


View attachment "config.txt" of type "text/plain" (126387 bytes)

Download attachment "raw.log" of type "application/octet-stream" (12183 bytes)

View attachment "repro.txt" of type "text/plain" (563 bytes)

Download attachment "repro.c" of type "application/octet-stream" (2819 bytes)