------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(!is_rwsem_reader_owned(sem)): count = 0x0, magic = 0xffff0000ca56f1b0, owner = 0x0, curr 0xffff0000c7bd1a40, list empty
WARNING: CPU: 1 PID: 3337 at kernel/locking/rwsem.c:1336 __up_read+0x248/0x2ac kernel/locking/rwsem.c:1336
Modules linked in:
CPU: 1 PID: 3337 Comm: syz-executor338 Not tainted 6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __up_read+0x248/0x2ac kernel/locking/rwsem.c:1336
lr : __up_read+0x248/0x2ac kernel/locking/rwsem.c:1336
sp : ffff800012e4bb40
x29: ffff800012e4bb40 x28: ffff0000c7bd1a40 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000000 x24: ffff0000c7bd1a40
x23: 00000000ffffff9c x22: ffff0000ca56f1b0 x21: ffff80000d37c000
x20: 0000000000000000 x19: ffff0000ca56f1b0 x18: 0000000000000000
x17: 0000000000000000 x16: ffff80000dbe6158 x15: ffff0000c7bd1a40
x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000c7bd1a40
x11: ff808000081c4d64 x10: 0000000000000000 x9 : f81f074dcbab0400
x8 : f81f074dcbab0400 x7 : ffff80000c091ebc x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000100000000 x0 : 000000000000008c
Call trace:
 __up_read+0x248/0x2ac kernel/locking/rwsem.c:1336
 up_read+0x38/0x48 kernel/locking/rwsem.c:1605
 inode_unlock_shared include/linux/fs.h:771 [inline]
 lookup_slow+0x50/0x68 fs/namei.c:1703
 walk_component+0x178/0x1b0 fs/namei.c:1993
 lookup_last fs/namei.c:2450 [inline]
 path_lookupat+0xc4/0x208 fs/namei.c:2474
 filename_lookup+0xf8/0x264 fs/namei.c:2503
 user_path_at_empty+0x5c/0x114 fs/namei.c:2876
 user_path_at include/linux/namei.h:57 [inline]
 __do_sys_chdir fs/open.c:514 [inline]
 __se_sys_chdir fs/open.c:508 [inline]
 __arm64_sys_chdir+0x54/0x128 fs/open.c:508
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584
irq event stamp: 344
hardirqs last  enabled at (343): [<ffff8000081c3048>] __up_console_sem+0xb0/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (344): [<ffff80000c084084>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (88): [<ffff80000801c82c>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (86): [<ffff80000801c7f8>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
DEBUG_RWSEMS_WARN_ON(tmp < 0): count = 0xffffffffffffff00, magic = 0xffff0000ca56f1b0, owner = 0x0, curr 0xffff0000c7bd1a40, list empty
WARNING: CPU: 1 PID: 3337 at kernel/locking/rwsem.c:1340 __up_read+0x1f0/0x2ac kernel/locking/rwsem.c:1340
Modules linked in:
CPU: 1 PID: 3337 Comm: syz-executor338 Tainted: G        W          6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __up_read+0x1f0/0x2ac kernel/locking/rwsem.c:1340
lr : __up_read+0x1f0/0x2ac kernel/locking/rwsem.c:1340
sp : ffff800012e4bb40
x29: ffff800012e4bb40 x28: ffff0000c7bd1a40 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000000 x24: ffff0000c7bd1a40
x23: 00000000ffffff9c x22: ffffffffffffff00 x21: ffff80000d37c000
x20: ffff0000ca56f1b8 x19: ffff0000ca56f1b0 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000001 x15: 0000000000000000
x14: 000000000000000e x13: 205d373333335420 x12: 5b5d353430373631
x11: ff808000081c4d64 x10: 0000000000000000 x9 : f81f074dcbab0400
x8 : f81f074dcbab0400 x7 : 205b5d3534303736 x6 : ffff80000c091ebc
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000087
Call trace:
 __up_read+0x1f0/0x2ac kernel/locking/rwsem.c:1340
 up_read+0x38/0x48 kernel/locking/rwsem.c:1605
 inode_unlock_shared include/linux/fs.h:771 [inline]
 lookup_slow+0x50/0x68 fs/namei.c:1703
 walk_component+0x178/0x1b0 fs/namei.c:1993
 lookup_last fs/namei.c:2450 [inline]
 path_lookupat+0xc4/0x208 fs/namei.c:2474
 filename_lookup+0xf8/0x264 fs/namei.c:2503
 user_path_at_empty+0x5c/0x114 fs/namei.c:2876
 user_path_at include/linux/namei.h:57 [inline]
 __do_sys_chdir fs/open.c:514 [inline]
 __se_sys_chdir fs/open.c:508 [inline]
 __arm64_sys_chdir+0x54/0x128 fs/open.c:508
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584
irq event stamp: 373
hardirqs last  enabled at (373): [<ffff80000c086240>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (373): [<ffff80000c086240>] exit_to_kernel_mode+0xe8/0x118 arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (372): [<ffff80000c08f64c>] preempt_schedule_irq+0x80/0x110 kernel/sched/core.c:6834
softirqs last  enabled at (368): [<ffff8000080102e4>] _stext+0x2e4/0x37c
softirqs last disabled at (349): [<ffff800008017c88>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
---[ end trace 0000000000000000 ]---