------------[ cut here ]------------ WARNING: CPU: 1 PID: 14095 at fs/io_uring.c:1546 req_ref_put fs/io_uring.c:1546 [inline] WARNING: CPU: 1 PID: 14095 at fs/io_uring.c:1546 io_poll_double_wake+0x545/0x5c0 fs/io_uring.c:4986 Modules linked in: CPU: 1 PID: 14095 Comm: syz-executor.4 Not tainted 5.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:req_ref_put fs/io_uring.c:1546 [inline] RIP: 0010:io_poll_double_wake+0x545/0x5c0 fs/io_uring.c:4986 Code: 24 e8 2f ba 91 ff bd 01 00 00 00 89 e8 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 ba 91 ff 0f 0b eb b7 e8 0b ba 91 ff <0f> 0b eb d8 89 d9 80 e1 07 38 c1 0f 8c 13 fb ff ff 48 89 df e8 a2 RSP: 0018:ffffc9000265f408 EFLAGS: 00010087 RAX: ffffffff81ee6805 RBX: 0000000000000001 RCX: 0000000000040000 RDX: ffffc90012a5f000 RSI: 00000000000027ba RDI: 00000000000027bb RBP: ffff8880776d2648 R08: ffffffff81ee67d8 R09: ffffed100eeda4d4 R10: ffffed100eeda4d4 R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8880776d2640 R14: ffff8880776d269c R15: 1ffff1100eeda4c9 FS: 00007f8c0b3f7700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc50ff98fe8 CR3: 0000000034f53000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __wake_up_common+0x2aa/0x4e0 kernel/sched/wait.c:108 __wake_up_common_lock kernel/sched/wait.c:138 [inline] __wake_up+0x145/0x210 kernel/sched/wait.c:157 tty_ldisc_lock+0x5b/0xb0 drivers/tty/tty_ldisc.c:322 tty_reopen+0x17a/0x2c0 drivers/tty/tty_io.c:1366 tty_open_by_driver drivers/tty/tty_io.c:2092 [inline] tty_open+0x85f/0xdd0 drivers/tty/tty_io.c:2146 chrdev_open+0x53b/0x5f0 fs/char_dev.c:414 do_dentry_open+0x7cb/0x1020 fs/open.c:826 do_open fs/namei.c:3374 [inline] path_openat+0x27e7/0x36b0 fs/namei.c:3507 do_filp_open+0x253/0x4d0 fs/namei.c:3534 do_sys_openat2+0x124/0x460 fs/open.c:1204 do_sys_open fs/open.c:1220 [inline] __do_sys_openat fs/open.c:1236 [inline] __se_sys_openat fs/open.c:1231 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1231 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4196d4 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f8c0b3f6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004196d4 RDX: 0000000000000002 RSI: 00007f8c0b3f6d60 RDI: 00000000ffffff9c RBP: 00007f8c0b3f6d60 R08: 0000000000000000 R09: 000000000000000e R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 00007fff469eff9f R14: 00007f8c0b3f7300 R15: 0000000000022000