===================================== WARNING: bad unlock balance detected! 5.6.0-rc2-next-20200224-syzkaller #0 Not tainted ------------------------------------- kworker/u4:8/14274 is trying to release lock (&file->mut) at: [] ucma_event_handler+0x711/0xef0 drivers/infiniband/core/ucma.c:389 but there are no more locks to release! other info that might help us debug this: 4 locks held by kworker/u4:8/14274: #0: ffff88821aa82128 ((wq_completion)ib_addr){+.+.}, at: __write_once_size include/linux/compiler.h:250 [inline] #0: ffff88821aa82128 ((wq_completion)ib_addr){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88821aa82128 ((wq_completion)ib_addr){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff88821aa82128 ((wq_completion)ib_addr){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff88821aa82128 ((wq_completion)ib_addr){+.+.}, at: set_work_data kernel/workqueue.c:615 [inline] #0: ffff88821aa82128 ((wq_completion)ib_addr){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:642 [inline] #0: ffff88821aa82128 ((wq_completion)ib_addr){+.+.}, at: process_one_work+0x8dd/0x17a0 kernel/workqueue.c:2237 #1: ffffc90004d37dc0 ((work_completion)(&(&req->work)->work)){+.+.}, at: process_one_work+0x917/0x17a0 kernel/workqueue.c:2241 #2: ffff88804a3e1390 (&id_priv->handler_mutex){+.+.}, at: addr_handler+0xaf/0x3a0 drivers/infiniband/core/cma.c:3099 #3: ffff8880a2a67c60 (&file->mut){+.+.}, at: ucma_event_handler+0xb3/0xef0 drivers/infiniband/core/ucma.c:349 stack backtrace: CPU: 1 PID: 14274 Comm: kworker/u4:8 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ib_addr process_one_req Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 print_unlock_imbalance_bug kernel/locking/lockdep.c:4243 [inline] print_unlock_imbalance_bug.cold+0x114/0x123 kernel/locking/lockdep.c:4219 __lock_release kernel/locking/lockdep.c:4477 [inline] lock_release+0x5f2/0x960 kernel/locking/lockdep.c:4738 __mutex_unlock_slowpath+0x86/0x6a0 kernel/locking/mutex.c:1228 mutex_unlock+0xd/0x10 kernel/locking/mutex.c:740 ucma_event_handler+0x711/0xef0 drivers/infiniband/core/ucma.c:389 cma_cm_event_handler+0xb3/0x660 drivers/infiniband/core/cma.c:1917 addr_handler+0x2c9/0x3a0 drivers/infiniband/core/cma.c:3132 process_one_req+0x106/0x680 drivers/infiniband/core/addr.c:643 process_one_work+0xa05/0x17a0 kernel/workqueue.c:2266 worker_thread+0x98/0xe40 kernel/workqueue.c:2412 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352