[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Found device /dev/ttyS0. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 44.903303][ T8436] ------------[ cut here ]------------ [ 44.908779][ T8436] WARNING: CPU: 0 PID: 8436 at fs/io_uring.c:1513 io_poll_double_wake+0x1fa/0x240 [ 44.917998][ T8436] Modules linked in: [ 44.921878][ T8436] CPU: 0 PID: 8436 Comm: syz-executor793 Not tainted 5.13.0-rc3-syzkaller #0 [ 44.930925][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.941261][ T8436] RIP: 0010:io_poll_double_wake+0x1fa/0x240 [ 44.947450][ T8436] Code: cc 83 d4 ff f0 41 ff 4d 5c 0f 94 c3 31 ff 89 de e8 4b 8b d4 ff 84 db b8 01 00 00 00 0f 84 bf fe ff ff 89 04 24 e8 a6 83 d4 ff <0f> 0b 8b 04 24 e9 ad fe ff ff e8 97 83 d4 ff 4d 89 ee e9 39 fe ff [ 44.967059][ T8436] RSP: 0018:ffffc90000dfbd38 EFLAGS: 00010093 [ 44.974692][ T8436] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 44.982642][ T8436] RDX: ffff88810b0bc000 RSI: ffffffff816029ea RDI: 0000000000000003 [ 44.991501][ T8436] RBP: ffff888117982130 R08: 000000000000007f R09: 0000000000000001 [ 44.999635][ T8436] R10: ffffffff816029d5 R11: 0000000000000000 R12: 0000000000000000 [ 45.007914][ T8436] R13: ffff888117982100 R14: ffff888117982100 R15: 0000000000000000 [ 45.015911][ T8436] FS: 0000000000ff4300(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 45.024839][ T8436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.031408][ T8436] CR2: 00007ffee0bcb080 CR3: 000000011317e000 CR4: 00000000001506f0 [ 45.039478][ T8436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.047889][ T8436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.055856][ T8436] Call Trace: [ 45.059204][ T8436] __wake_up_common+0x76/0x180 [ 45.063949][ T8436] __wake_up_common_lock+0x77/0xb0 [ 45.069138][ T8436] pty_close+0x11e/0x1e0 [ 45.073360][ T8436] ? pty_unix98_compat_ioctl+0x50/0x50 [ 45.078797][ T8436] tty_release+0x1c2/0x6a0 [ 45.083276][ T8436] ? ima_file_free+0x48/0x190 [ 45.087961][ T8436] ? tty_release_struct+0x90/0x90 [ 45.093259][ T8436] __fput+0x105/0x400 [ 45.097224][ T8436] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 45.103595][ T8436] ? fput_many.part.0+0x74/0xe0 [ 45.108565][ T8436] task_work_run+0x73/0xb0 [ 45.113056][ T8436] exit_to_user_mode_prepare+0x174/0x180 [ 45.118766][ T8436] syscall_exit_to_user_mode+0x1d/0x40 [ 45.124249][ T8436] do_syscall_64+0x47/0xb0 [ 45.128743][ T8436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.134673][ T8436] RIP: 0033:0x406efb [ 45.138560][ T8436] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 45.158446][ T8436] RSP: 002b:00007ffee0b18820 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 45.166848][ T8436] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000406efb [ 45.174911][ T8436] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000004 [ 45.182994][ T8436] RBP: 0000000000000007 R08: 0000000000000000 R09: 00007ffe00000064 [ 45.190958][ T8436] R10: 00007ffee0b18880 R11: 0000000000000293 R12: 000000000000af34 [ 45.198907][ T8436] R13: 00000000004eb4ec R14: 00007ffee0b18880 R15: 00000000004eb4e0 [ 45.206871][ T8436] ---[ end trace bf119fddf2e5e002 ]--- executing program [ 52.670176][ T8415] kmemleak: 40 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 59.211724][ T8415] kmemleak: 38 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888117747500 (size 232): comm "syz-executor793", pid 8437, jiffies 4294941760 (age 14.380s) hex dump (first 32 bytes): 00 a2 11 02 81 88 ff ff 18 4e 6f 16 81 88 ff ff .........No..... 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [] io_submit_sqes+0x6c9/0x23b0 [] __do_sys_io_uring_enter+0x818/0xf50 [] do_syscall_64+0x3a/0xb0 [] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888117747400 (size 232): comm "syz-executor793", pid 8437, jiffies 4294941760 (age 14.380s) hex dump (first 32 bytes): 00 a2 11 02 81 88 ff ff 18 4e 6f 16 81 88 ff ff .........No..... 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [] io_submit_sqes+0x6c9/0x23b0 [] __do_sys_io_uring_enter+0x818/0xf50 [] do_syscall_64+0x3a/0xb0 [] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888117747300 (size 232): comm "syz-executor793", pid 8437, jiffies 4294941760 (age 14.380s) hex dump (first 32 bytes): 00 a2 11 02 81 88 ff ff 18 4e 6f 16 81 88 ff ff .........No..... 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [] io_submit_sqes+0x6c9/0x23b0 [] __do_sys_io_uring_enter+0x818/0xf50 [] do_syscall_64+0x3a/0xb0 [] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888117747200 (size 232): comm "syz-executor793", pid 8437, jiffies 4294941760 (age 14.380s) hex dump (first 32 bytes): 00 a2 11 02 81 88 ff ff 18 4e 6f 16 81 88 ff ff .........No..... 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [] io_submit_sqes+0x6c9/0x23b0 [] __do_sys_io_uring_enter+0x818/0xf50 [] do_syscall_64+0x3a/0xb0 [] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888117747100 (size 232): comm "syz-executor793", pid 8437, jiffies 4294941760 (age 14.380s) hex dump (first 32 bytes): 00 a2 11 02 81 88 ff ff 18 4e 6f 16 81 88 ff ff .........No..... 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [] io_submit_sqes+0x6c9/0x23b0 [] __do_sys_io_uring_enter+0x818/0xf50 [] do_syscall_64+0x3a/0xb0 [] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff88811774acc0 (size 64): comm "syz-executor793", pid 8437, jiffies 4294941760 (age 14.380s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 4e 6f 16 81 88 ff ff .........No..... 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [] __io_queue_proc+0x10a/0x1b0 [] n_tty_poll+0x76/0x3a0 [] tty_poll+0x89/0xc0 [] __io_arm_poll_handler+0xb9/0x2b0 [] io_poll_add.constprop.0+0x47/0x180 [] io_issue_sqe+0x19f/0x2880 [] __io_queue_sqe+0x9a/0x620 [] io_queue_sqe+0x275/0x3e0 [] io_submit_sqes+0x2028/0x23b0 [] __do_sys_io_uring_enter+0x818/0xf50 [] do_syscall_64+0x3a/0xb0 [] entry_SYSCALL_64_after_hwframe+0x44/0xae