===================================== WARNING: bad unlock balance detected! 5.6.0-syzkaller #0 Not tainted ------------------------------------- kworker/u4:7/337 is trying to release lock (&file->mut) at: [] ucma_event_handler+0x700/0xeb0 drivers/infiniband/core/ucma.c:391 but there are no more locks to release! other info that might help us debug this: 4 locks held by kworker/u4:7/337: #0: ffff8880a4f1a138 ((wq_completion)ib_addr){+.+.}-{0:0}, at: __write_once_size include/linux/compiler.h:226 [inline] #0: ffff8880a4f1a138 ((wq_completion)ib_addr){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880a4f1a138 ((wq_completion)ib_addr){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline] #0: ffff8880a4f1a138 ((wq_completion)ib_addr){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline] #0: ffff8880a4f1a138 ((wq_completion)ib_addr){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:615 [inline] #0: ffff8880a4f1a138 ((wq_completion)ib_addr){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline] #0: ffff8880a4f1a138 ((wq_completion)ib_addr){+.+.}-{0:0}, at: process_one_work+0x844/0x16a0 kernel/workqueue.c:2237 #1: ffffc900019d7dc0 ((work_completion)(&(&req->work)->work)){+.+.}-{0:0}, at: process_one_work+0x878/0x16a0 kernel/workqueue.c:2241 #2: ffff88809f8163b8 (&id_priv->handler_mutex){+.+.}-{3:3}, at: addr_handler+0xa0/0x340 drivers/infiniband/core/cma.c:3100 #3: ffff888092212468 (&file->mut){+.+.}-{3:3}, at: ucma_event_handler+0xb2/0xeb0 drivers/infiniband/core/ucma.c:351 stack backtrace: CPU: 1 PID: 337 Comm: kworker/u4:7 Not tainted 5.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ib_addr process_one_req Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 __lock_release kernel/locking/lockdep.c:4633 [inline] lock_release+0x586/0x800 kernel/locking/lockdep.c:4941 __mutex_unlock_slowpath+0x81/0x660 kernel/locking/mutex.c:1228 ucma_event_handler+0x700/0xeb0 drivers/infiniband/core/ucma.c:391 cma_cm_event_handler+0xab/0x640 drivers/infiniband/core/cma.c:1917 addr_handler+0x276/0x340 drivers/infiniband/core/cma.c:3133 process_one_req+0xfa/0x680 drivers/infiniband/core/addr.c:643 process_one_work+0x965/0x16a0 kernel/workqueue.c:2266 worker_thread+0x96/0xe20 kernel/workqueue.c:2412 kthread+0x388/0x470 kernel/kthread.c:268 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352