IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready general protection fault: 0000 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 6723 Comm: syz-executor.2 Not tainted 4.1.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800ad060950 ti: ffff8800aaa40000 task.ti: ffff8800aaa40000 RIP: 0010:[] [] atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RIP: 0010:[] [] __lock_acquire+0x2db/0x1c70 kernel/locking/lockdep.c:3105 RSP: 0000:ffff8800aaa43b18 EFLAGS: 00010086 RAX: 0000000000000000 RBX: dead4ead00000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffff8800aaa43bd8 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000000 R14: ffff8800ab788028 R15: ffff8800ad060950 FS: 00000000026ea940(0063) GS:ffff88012c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056458fa550b8 CR3: 00000000ad2c9000 CR4: 00000000001407e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 0000000000000001 ffff8800ad0611e0 ffff8800aaa43b38 ffffffff811e162d ffff8800aaa43c08 ffffffff00000000 0000000000000000 ffff880000000000 ffff8800b649a8b8 ffffffff83d7e6c0 ffff8800ad0611e0 ffffffff00000000 Call Trace: [] lock_acquire+0xe6/0x310 kernel/locking/lockdep.c:3623 [] flush_work+0x3a/0x320 kernel/workqueue.c:2731 [] __cancel_work_timer+0xda/0x210 kernel/workqueue.c:2801 [] cancel_work_sync+0xb/0x10 kernel/workqueue.c:2836 [] release_tty+0x8a/0x120 drivers/tty/tty_io.c:1697 [] tty_release+0x3ea/0x570 drivers/tty/tty_io.c:1928 [] __fput+0xed/0x250 fs/file_table.c:208 [] ____fput+0x9/0x10 fs/file_table.c:244 [] task_work_run+0xc4/0xf0 kernel/task_work.c:123 [] tracehook_notify_resume include/linux/tracehook.h:190 [inline] [] do_notify_resume+0x68/0x70 arch/x86/kernel/signal.c:739 [] int_signal+0x12/0x17 Code: 49 81 3e 40 29 64 83 b8 00 00 00 00 44 0f 44 e0 41 83 fd 01 0f 87 aa fd ff ff 44 89 e8 49 8b 5c c6 08 48 85 db 0f 84 99 fd ff ff ff 83 98 01 00 00 8b 05 10 6c 11 03 41 8b 8f 60 08 00 00 85 RIP [] __lock_acquire+0x2db/0x1c70 kernel/locking/lockdep.c:3100 RSP ---[ end trace 6fa09b6099d840b9 ]---