===================================== WARNING: bad unlock balance detected! kobject: 'tx-1' (0000000067fa7029): kobject_add_internal: parent: 'queues', set: 'queues' 4.19.0-rc7+ #280 Not tainted ------------------------------------- kworker/u4:0/7 is trying to release lock (&file->mut) at: [] ucma_event_handler+0x788/0xff0 drivers/infiniband/core/ucma.c:392 but there are no more locks to release! other info that might help us debug this: 4 locks held by kworker/u4:0/7: #0: 00000000640b533e ((wq_completion)"ib_addr"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 00000000640b533e ((wq_completion)"ib_addr"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000640b533e ((wq_completion)"ib_addr"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000640b533e ((wq_completion)"ib_addr"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000640b533e ((wq_completion)"ib_addr"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000640b533e ((wq_completion)"ib_addr"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000640b533e ((wq_completion)"ib_addr"){+.+.}, at: process_one_work+0xb43/0x1b90 kernel/workqueue.c:2124 kobject: 'tx-1' (0000000067fa7029): kobject_uevent_env #1: 000000005e9a7b90 ((work_completion)(&(&req->work)->work)){+.+.}, at: process_one_work+0xb9a/0x1b90 kernel/workqueue.c:2128 #2: 00000000085e795e (&id_priv->handler_mutex kobject: 'tx-1' (0000000067fa7029): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim10/net/wlan3/queues/tx-1' ){+.+.}, at: addr_handler+0xed/0x430 drivers/infiniband/core/cma.c:2858 #3: 000000000d3a6485 (&file->mut){+.+.}, at: ucma_event_handler+0x116/0xff0 drivers/infiniband/core/ucma.c:352 stack backtrace: CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.0-rc7+ #280 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'tx-2' (00000000a69acce3): kobject_add_internal: parent: 'queues', set: 'queues' Workqueue: ib_addr process_one_req Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 kobject: 'tx-2' (00000000a69acce3): kobject_uevent_env print_unlock_imbalance_bug.cold.48+0xcc/0xd8 kernel/locking/lockdep.c:3464 __lock_release kernel/locking/lockdep.c:3671 [inline] lock_release+0x785/0x970 kernel/locking/lockdep.c:3919 kobject: 'tx-2' (00000000a69acce3): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim10/net/wlan3/queues/tx-2' kobject: 'tx-3' (0000000005b6b19f): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-3' (0000000005b6b19f): kobject_uevent_env __mutex_unlock_slowpath+0x102/0x8c0 kernel/locking/mutex.c:1197 kobject: 'tx-3' (0000000005b6b19f): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim10/net/wlan3/queues/tx-3' kobject: 'loop1' (00000000629a2c4d): kobject_uevent_env mutex_unlock+0xd/0x10 kernel/locking/mutex.c:713 kobject: 'loop1' (00000000629a2c4d): fill_kobj_path: path = '/devices/virtual/block/loop1' ucma_event_handler+0x788/0xff0 drivers/infiniband/core/ucma.c:392 addr_handler+0x311/0x430 drivers/infiniband/core/cma.c:2882 process_one_req+0x1a6/0x940 drivers/infiniband/core/addr.c:570 process_one_work+0xc90/0x1b90 kernel/workqueue.c:2153 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296 kthread+0x35a/0x420 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413 kobject: 'event4' (00000000cb105218): kobject_cleanup, parent (null) kobject: 'event4' (00000000cb105218): calling ktype release kobject: 'event4': free name kobject: 'input13' (00000000f07e4d5d): kobject_uevent_env kobject: 'input13' (00000000f07e4d5d): fill_kobj_path: path = '/devices/virtual/input/input13' kobject: 'input13' (00000000f07e4d5d): kobject_cleanup, parent (null) kobject: 'input13' (00000000f07e4d5d): calling ktype release kobject: 'input13': free name kobject: 'hwsim11' (000000008bc57357): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' kobject: 'loop2' (000000005032aad3): kobject_uevent_env kobject: 'loop2' (000000005032aad3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'input15' (0000000072affe5d): kobject_add_internal: parent: 'input', set: 'devices' kobject: 'loop3' (0000000089f9c2df): kobject_uevent_env kobject: 'loop3' (0000000089f9c2df): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'hwsim11' (000000008bc57357): kobject_uevent_env kobject: 'input16' (000000003cb17aa0): kobject_add_internal: parent: 'input', set: 'devices' kobject: 'input15' (0000000072affe5d): kobject_uevent_env kobject: 'hwsim11' (000000008bc57357): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11' kobject: 'loop4' (00000000d39a343e): kobject_uevent_env kobject: 'input16' (000000003cb17aa0): kobject_uevent_env kobject: 'input15' (0000000072affe5d): fill_kobj_path: path = '/devices/virtual/input/input15' kobject: 'loop4' (00000000d39a343e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'hwsim11' (000000008bc57357): kobject_uevent_env kobject: 'input16' (000000003cb17aa0): fill_kobj_path: path = '/devices/virtual/input/input16' kobject: 'hwsim11' (000000008bc57357): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11' kobject: 'loop5' (000000002dc5a031): kobject_uevent_env kobject: 'loop5' (000000002dc5a031): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'input15' (0000000072affe5d): fill_kobj_path: path = '/devices/virtual/input/input15' kobject: 'input16' (000000003cb17aa0): fill_kobj_path: path = '/devices/virtual/input/input16' kobject: 'loop4' (00000000d39a343e): kobject_uevent_env kobject: 'loop4' (00000000d39a343e): fill_kobj_path: path = '/devices/virtual/block/loop4' input: syz1 as /devices/virtual/input/input15 input: syz1 as /devices/virtual/input/input16 kobject: 'ieee80211' (000000003df7ee2f): kobject_add_internal: parent: 'hwsim11', set: '(null)' kobject: 'event4' (00000000376688af): kobject_add_internal: parent: 'input16', set: 'devices' kobject: 'phy11' (0000000059da5cfc): kobject_add_internal: parent: 'ieee80211', set: 'devices' kobject: 'event4' (00000000376688af): kobject_uevent_env kobject: 'event4' (00000000376688af): fill_kobj_path: path = '/devices/virtual/input/input16/event4' kobject: 'phy11' (0000000059da5cfc): kobject_uevent_env kobject: 'loop5' (000000002dc5a031): kobject_uevent_env kobject: 'phy11' (0000000059da5cfc): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/ieee80211/phy11' kobject: 'loop5' (000000002dc5a031): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'event5' (00000000870b2ed3): kobject_add_internal: parent: 'input15', set: 'devices' kobject: 'loop4' (00000000d39a343e): kobject_uevent_env kobject: 'loop4' (00000000d39a343e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'rfkill13' (0000000085945149): kobject_add_internal: parent: 'phy11', set: 'devices' kobject: 'event5' (00000000870b2ed3): kobject_uevent_env kobject: 'event5' (00000000870b2ed3): fill_kobj_path: path = '/devices/virtual/input/input15/event5' kobject: 'rfkill13' (0000000085945149): kobject_uevent_env kobject: 'event4' (00000000376688af): kobject_uevent_env kobject: 'rfkill13' (0000000085945149): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/ieee80211/phy11/rfkill13' kobject: 'event4' (00000000376688af): fill_kobj_path: path = '/devices/virtual/input/input16/event4' kobject: '(null)' (000000001b261552): kobject_cleanup, parent 00000000376688af kobject: '(null)' (000000001b261552): calling ktype release ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' kobject: 'net' (00000000ce80171f): kobject_add_internal: parent: 'hwsim11', set: '(null)' kobject: 'wlan4' (0000000087b39086): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'wlan4' (0000000087b39086): kobject_uevent_env kobject: 'wlan4' (0000000087b39086): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/net/wlan4' kobject: 'queues' (00000000f7e05299): kobject_add_internal: parent: 'wlan4', set: '' kobject: 'event4' (00000000376688af): kobject_cleanup, parent (null) kobject: 'queues' (00000000f7e05299): kobject_uevent_env kobject: 'event4' (00000000376688af): calling ktype release kobject: 'queues' (00000000f7e05299): kobject_uevent_env: filter function caused the event to drop! kobject: 'event4': free name kobject: 'event5' (00000000870b2ed3): kobject_uevent_env kobject: 'event5' (00000000870b2ed3): fill_kobj_path: path = '/devices/virtual/input/input15/event5' kobject: 'rx-0' (000000004208f154): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'input16' (000000003cb17aa0): kobject_uevent_env kobject: 'input16' (000000003cb17aa0): fill_kobj_path: path = '/devices/virtual/input/input16' kobject: 'rx-0' (000000004208f154): kobject_uevent_env kobject: '(null)' (00000000bbb6b425): kobject_cleanup, parent 00000000870b2ed3 kobject: 'rx-0' (000000004208f154): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/net/wlan4/queues/rx-0' kobject: 'input16' (000000003cb17aa0): kobject_cleanup, parent (null) kobject: 'tx-0' (00000000d54edc20): kobject_add_internal: parent: 'queues', set: 'queues' kobject: '(null)' (00000000bbb6b425): calling ktype release kobject: 'tx-0' (00000000d54edc20): kobject_uevent_env kobject: 'input16' (000000003cb17aa0): calling ktype release kobject: 'tx-0' (00000000d54edc20): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/net/wlan4/queues/tx-0' kobject: 'input16': free name kobject: 'tx-1' (00000000b34f0ee9): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-1' (00000000b34f0ee9): kobject_uevent_env kobject: 'tx-1' (00000000b34f0ee9): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/net/wlan4/queues/tx-1' kobject: 'loop2' (000000005032aad3): kobject_uevent_env kobject: 'tx-2' (0000000000a70e01): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop2' (000000005032aad3): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'tx-2' (0000000000a70e01): kobject_uevent_env kobject: 'event5' (00000000870b2ed3): kobject_cleanup, parent (null) kobject: 'tx-2' (0000000000a70e01): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/net/wlan4/queues/tx-2' kobject: 'event5' (00000000870b2ed3): calling ktype release kobject: 'tx-3' (00000000b9b3ba0b): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-3' (00000000b9b3ba0b): kobject_uevent_env kobject: 'event5': free name kobject: 'tx-3' (00000000b9b3ba0b): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim11/net/wlan4/queues/tx-3' kobject: 'input15' (0000000072affe5d): kobject_uevent_env kobject: 'input15' (0000000072affe5d): fill_kobj_path: path = '/devices/virtual/input/input15' kobject: 'input15' (0000000072affe5d): kobject_cleanup, parent (null) kobject: 'input15' (0000000072affe5d): calling ktype release kobject: 'loop1' (00000000629a2c4d): kobject_uevent_env kobject: 'input15': free name kobject: 'loop1' (00000000629a2c4d): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (0000000089f9c2df): kobject_uevent_env kobject: 'loop3' (0000000089f9c2df): fill_kobj_path: path = '/devices/virtual/block/loop3'