[ 29.624734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.632944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.642326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.649854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.797277] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 29.828057] syz-executor.0 (7959) used greatest stack depth: 24088 bytes left [ 30.219673] can: request_module (can-proto-0) failed. [ 30.229673] can: request_module (can-proto-0) failed. [ 30.238311] can: request_module (can-proto-0) failed. [ 40.081277] unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Warning: Permanently added '10.128.10.7' (ECDSA) to the list of known hosts. [ 50.338384] unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 [ 50.494369] [ 50.496147] ================================ [ 50.500657] WARNING: inconsistent lock state [ 50.505150] 4.14.273-syzkaller #0 Not tainted [ 50.509945] -------------------------------- [ 50.515121] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 50.521235] syz-executor271/8290 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 50.527447] (sync_timeline_list_lock){?.+.}, at: [] sync_timeline_debug_remove+0x27/0x1b0 [ 50.537492] {HARDIRQ-ON-W} state was registered at: [ 50.542497] mark_held_locks+0xc7/0x130 [ 50.546529] trace_hardirqs_on_caller+0x296/0x570 [ 50.551433] trace_hardirqs_on+0xd/0x10 [ 50.555468] _raw_spin_unlock_irq+0x27/0x90 [ 50.559844] sync_debugfs_show+0xed/0x1f0 [ 50.564053] seq_read+0x4ad/0x12c0 [ 50.567672] __vfs_read+0xdb/0x840 [ 50.571274] vfs_read+0xff/0x310 [ 50.574717] SyS_read+0x100/0x250 [ 50.578414] do_syscall_64+0x1c7/0x5b0 [ 50.582375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 50.587621] irq event stamp: 9120 [ 50.591349] hardirqs last enabled at (9119): [] _raw_spin_unlock_irq+0x27/0x90 [ 50.600433] hardirqs last disabled at (9120): [] irq_work_interrupt+0x95/0xa0 [ 50.609355] softirqs last enabled at (5298): [] __do_softirq+0x644/0x9a2 [ 50.617900] softirqs last disabled at (5271): [] irq_exit+0x15f/0x1a0 [ 50.626030] [ 50.626030] other info that might help us debug this: [ 50.632757] Possible unsafe locking scenario: [ 50.632757] [ 50.638790] CPU0 [ 50.641348] ---- [ 50.643918] lock(sync_timeline_list_lock); [ 50.648317] [ 50.651062] lock(sync_timeline_list_lock); [ 50.655617] [ 50.655617] *** DEADLOCK *** [ 50.655617] [ 50.661646] no locks held by syz-executor271/8290. [ 50.666543] [ 50.666543] stack backtrace: [ 50.671012] CPU: 1 PID: 8290 Comm: syz-executor271 Not tainted 4.14.273-syzkaller #0 [ 50.678862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.688214] Call Trace: [ 50.690868] [ 50.693011] dump_stack+0x14b/0x1e7 [ 50.696734] print_usage_bug.cold.46+0x433/0x563 [ 50.701576] mark_lock+0xc00/0x11a0 [ 50.705178] ? print_irq_inversion_bug+0xd0/0xd0 [ 50.709993] __lock_acquire+0x1214/0x42d0 [ 50.714118] ? __lock_acquire+0x701/0x42d0 [ 50.718354] ? trace_hardirqs_on+0x10/0x10 [ 50.722753] ? trace_hardirqs_on+0x10/0x10 [ 50.727133] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 50.732223] ? debug_object_active_state+0x207/0x360 [ 50.737453] ? debug_object_activate+0x251/0x4b0 [ 50.742381] lock_acquire+0x17e/0x3e0 [ 50.746175] ? sync_timeline_debug_remove+0x27/0x1b0 [ 50.751366] _raw_spin_lock_irqsave+0x99/0xd0 [ 50.755845] ? sync_timeline_debug_remove+0x27/0x1b0 [ 50.761057] sync_timeline_debug_remove+0x27/0x1b0 [ 50.765974] sync_timeline_put+0x18/0x30 [ 50.770023] timeline_fence_release+0x1ca/0x2d0 [ 50.774687] dma_fence_release+0xb7/0x290 [ 50.778883] dma_fence_array_release+0x139/0x200 [ 50.783738] dma_fence_release+0xb7/0x290 [ 50.787865] irq_dma_fence_array_work+0x3a/0x40 [ 50.792571] irq_work_run_list+0xe6/0x150 [ 50.796692] irq_work_run+0x4d/0xc0 [ 50.800300] ? rcu_read_lock_sched_held+0x108/0x120 [ 50.805661] smp_irq_work_interrupt+0xab/0x4d0 [ 50.810225] irq_work_interrupt+0x9a/0xa0 [ 50.814363] [ 50.816589] RIP: 0010:_raw_spin_unlock_irq+0x56/0x90 [ 50.821679] RSP: 0018:ffff888095f37c00 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff09 [ 50.829363] RAX: dffffc0000000000 RBX: ffff8880a92aa250 RCX: 0000000000000000 [ 50.836714] RDX: 1ffffffff11e1153 RSI: 0000000000000001 RDI: ffffffff88f08a98 [ 50.843972] RBP: ffff888095f37c08 R08: 0000000000000001 R09: 0000000000000000 [ 50.851359] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a92aa100 [ 50.858619] R13: ffff8880a92aa240 R14: ffff8880a92aa200 R15: dffffc0000000000 [ 50.865890] sw_sync_debugfs_release+0x110/0x180 [ 50.870641] ? __might_sleep+0x93/0xb0 [ 50.874668] __fput+0x232/0x740 [ 50.877974] ____fput+0x9/0x10 [ 50.881344] task_work_run+0xe5/0x170 [ 50.885214] do_exit+0x98b/0x2c90 [ 50.888940] ? mm_update_next_owner+0x630/0x630 [ 50.893859] ? lock_downgrade+0x7f0/0x7f0 [ 50.898277] ? up_read+0x1a/0x40 [ 50.901828] ? __do_page_fault+0x4ef/0xa90 [ 50.906247] ? SyS_read+0x100/0x250 [ 50.909858] do_group_exit+0xf8/0x2c0 [ 50.913640] ? do_group_exit+0x2c0/0x2c0 [ 50.917680] SyS_exit_group+0x18/0x20 [ 50.921459] do_syscall_64+0x1c7/0x5b0 [ 50.925340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.930182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 50.935464] RIP: 0033:0x7f1543c5c969 [ 50.939165] RSP: 002b:00007ffc30196e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000