===================================== WARNING: bad unlock balance detected! 4.19.188-syzkaller #0 Not tainted ------------------------------------- kworker/u4:11/12447 is trying to release lock (&file->mut) at: [] ucma_event_handler+0x745/0xf50 drivers/infiniband/core/ucma.c:396 but there are no more locks to release! other info that might help us debug this: 4 locks held by kworker/u4:11/12447: #0: 0000000062a12c27 ((wq_completion)"ib_addr"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2123 #1: 000000003272443f ((work_completion)(&(&req->work)->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2127 #2: 00000000cf168725 (&id_priv->handler_mutex){+.+.}, at: addr_handler+0xaf/0x5f0 drivers/infiniband/core/cma.c:2886 #3: 000000006b2120eb (&file->mut){+.+.}, at: ucma_event_handler+0xb2/0xf50 drivers/infiniband/core/ucma.c:356 stack backtrace: CPU: 0 PID: 12447 Comm: kworker/u4:11 Not tainted 4.19.188-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ib_addr process_one_req Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_unlock_imbalance_bug kernel/locking/lockdep.c:149 [inline] __lock_release kernel/locking/lockdep.c:3678 [inline] lock_release.cold+0xe/0x4a kernel/locking/lockdep.c:3926 __mutex_unlock_slowpath+0x89/0x610 kernel/locking/mutex.c:1200 ucma_event_handler+0x745/0xf50 drivers/infiniband/core/ucma.c:396 addr_handler+0x2c1/0x5f0 drivers/infiniband/core/cma.c:2919 process_one_req+0xf1/0x620 drivers/infiniband/core/addr.c:569 process_one_work+0x864/0x1570 kernel/workqueue.c:2152 worker_thread+0x64c/0x1130 kernel/workqueue.c:2295 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. ldm_validate_privheads(): Cannot find PRIVHEAD 1. loop4: p2 < > overlayfs: unrecognized mount option "obj_user=(.-" or missing value overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. overlayfs: failed to resolve 'file0wÕácÑ«"dg': -2 overlayfs: unrecognized mount option "obj_user=(.-" or missing value overlayfs: './file0' not a directory ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. ldm_validate_privheads(): Cannot find PRIVHEAD 1. loop4: p2 < >