protocol 88fb is buggy, dev hsr_slave_1 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 syz-executor0 uses obsolete (PF_INET,SOCK_PACKET) ===================================== WARNING: bad unlock balance detected! 5.0.0-rc3+ #43 Not tainted ------------------------------------- kworker/u4:5/7950 is trying to release lock (&file->mut) at: [] ucma_event_handler+0x78c/0x1010 drivers/infiniband/core/ucma.c:394 but there are no more locks to release! other info that might help us debug this: 4 locks held by kworker/u4:5/7950: #0: 00000000c10bda8b ((wq_completion)"ib_addr"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000c10bda8b ((wq_completion)"ib_addr"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000c10bda8b ((wq_completion)"ib_addr"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000c10bda8b ((wq_completion)"ib_addr"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000c10bda8b ((wq_completion)"ib_addr"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000c10bda8b ((wq_completion)"ib_addr"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000c10bda8b ((wq_completion)"ib_addr"){+.+.}, at: process_one_work+0xbc7/0x1ce0 kernel/workqueue.c:2124 #1: 00000000ea12ed6f ((work_completion)(&(&req->work)->work)){+.+.}, at: process_one_work+0xc1d/0x1ce0 kernel/workqueue.c:2128 #2: 00000000e7e08fb2 (&id_priv->handler_mutex){+.+.}, at: addr_handler+0xf9/0x440 drivers/infiniband/core/cma.c:2970 #3: 000000002f54e5cb (&file->mut){+.+.}, at: ucma_event_handler+0x114/0x1010 drivers/infiniband/core/ucma.c:354 stack backtrace: kobject: 'loop2' (0000000071434c51): kobject_uevent_env CPU: 0 PID: 7950 Comm: kworker/u4:5 Not tainted 5.0.0-rc3+ #43 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ib_addr process_one_req Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 kobject: 'loop2' (0000000071434c51): fill_kobj_path: path = '/devices/virtual/block/loop2' print_unlock_imbalance_bug kernel/locking/lockdep.c:3391 [inline] print_unlock_imbalance_bug.cold+0xd0/0xdf kernel/locking/lockdep.c:3368 __lock_release kernel/locking/lockdep.c:3601 [inline] lock_release+0x77a/0xc40 kernel/locking/lockdep.c:3860 __mutex_unlock_slowpath+0xe9/0x870 kernel/locking/mutex.c:1197 mutex_unlock+0xd/0x10 kernel/locking/mutex.c:713 ucma_event_handler+0x78c/0x1010 drivers/infiniband/core/ucma.c:394 addr_handler+0x32c/0x440 drivers/infiniband/core/cma.c:2994 process_one_req+0x190/0x940 drivers/infiniband/core/addr.c:643 process_one_work+0xd0c/0x1ce0 kernel/workqueue.c:2153 kobject: 'loop4' (00000000c8f25958): kobject_uevent_env kobject: 'loop4' (00000000c8f25958): fill_kobj_path: path = '/devices/virtual/block/loop4' worker_thread+0x143/0x14a0 kernel/workqueue.c:2296 kthread+0x357/0x430 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 protocol 88fb is buggy, dev hsr_slave_0 kobject: 'loop3' (00000000cdf846b4): kobject_uevent_env kobject: 'loop3' (00000000cdf846b4): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (0000000068298d07): kobject_uevent_env kobject: 'loop0' (0000000068298d07): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (0000000071434c51): kobject_uevent_env kobject: 'loop2' (0000000071434c51): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (00000000cdf846b4): kobject_uevent_env kobject: 'loop3' (00000000cdf846b4): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop3' (00000000cdf846b4): kobject_uevent_env kobject: 'loop3' (00000000cdf846b4): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (00000000c8f25958): kobject_uevent_env kobject: 'loop4' (00000000c8f25958): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop0' (0000000068298d07): kobject_uevent_env kobject: 'loop0' (0000000068298d07): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop1' (00000000ddf2a98f): kobject_uevent_env kobject: 'loop1' (00000000ddf2a98f): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop1' (00000000ddf2a98f): kobject_uevent_env kobject: 'loop1' (00000000ddf2a98f): fill_kobj_path: path = '/devices/virtual/block/loop1'