bridge0: port 2(bridge_slave_1) entered forwarding state
bridge0: port 1(bridge_slave_0) entered forwarding state
bridge0: port 2(bridge_slave_1) entered forwarding state
general protection fault: 0000 [#1] PREEMPT SMP 
Modules linked in:
CPU: 0 PID: 16729 Comm: syz-executor467 Not tainted 4.1.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88012abb0310 ti: ffff8800b4dcc000 task.ti: ffff8800b4dcc000
RIP: 0010:[<ffffffff811c341b>]  [<ffffffff811c341b>] atomic_inc arch/x86/include/asm/atomic.h:92 [inline]
RIP: 0010:[<ffffffff811c341b>]  [<ffffffff811c341b>] __lock_acquire+0x2db/0x1c70 kernel/locking/lockdep.c:3105
RSP: 0018:ffff8800b4dcfa68  EFLAGS: 00010086
RAX: 0000000000000000 RBX: dead4ead00000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
RBP: ffff8800b4dcfb28 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
R13: 0000000000000000 R14: ffff88012a1ca028 R15: ffff88012abb0310
FS:  0000000000000000(0000) GS:ffff88012c000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f307fdd0000 CR3: 00000000b97d1000 CR4: 00000000001407f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8800b4dcfae8 ffff88012abb0310 ffffffff827912bb ffff8800b8966410
 0000000000000000 0000000000000000 ffff880000000000 ffffffff00000000
 ffff88012c017fc0 ffff88012c017fc0 ffff8800b4dcfac8 ffffffff811c2bcd
Call Trace:
 [<ffffffff811c5876>] lock_acquire+0xe6/0x310 kernel/locking/lockdep.c:3623
 [<ffffffff8118a35a>] flush_work+0x3a/0x320 kernel/workqueue.c:2731
 [<ffffffff8118bdaa>] __cancel_work_timer+0xda/0x210 kernel/workqueue.c:2801
 [<ffffffff8118beeb>] cancel_work_sync+0xb/0x10 kernel/workqueue.c:2836
 [<ffffffff81afb34a>] release_tty+0x8a/0x120 drivers/tty/tty_io.c:1697
 [<ffffffff81afb7ca>] tty_release+0x3ea/0x570 drivers/tty/tty_io.c:1928
 [<ffffffff8130020d>] __fput+0xed/0x250 fs/file_table.c:208
 [<ffffffff813003b9>] ____fput+0x9/0x10 fs/file_table.c:244
 [<ffffffff81191944>] task_work_run+0xc4/0xf0 kernel/task_work.c:123
 [<ffffffff8116fe3e>] exit_task_work include/linux/task_work.h:21 [inline]
 [<ffffffff8116fe3e>] do_exit+0x35e/0xca0 kernel/exit.c:746
 [<ffffffff8117080b>] do_group_exit+0x4b/0xc0 kernel/exit.c:874
 [<ffffffff8117088f>] SYSC_exit_group kernel/exit.c:885 [inline]
 [<ffffffff8117088f>] SyS_exit_group+0xf/0x10 kernel/exit.c:883
 [<ffffffff82791a32>] system_call_fastpath+0x16/0x7a
Code: 49 81 3e 40 f9 63 83 b8 00 00 00 00 44 0f 44 e0 41 83 fd 01 0f 87 aa fd ff ff 44 89 e8 49 8b 5c c6 08 48 85 db 0f 84 99 fd ff ff <f0> ff 83 98 01 00 00 8b 05 30 48 11 03 41 8b 8f 60 08 00 00 85 
RIP  [<ffffffff811c341b>] __lock_acquire+0x2db/0x1c70 kernel/locking/lockdep.c:3100
 RSP <ffff8800b4dcfa68>
---[ end trace cd85fd3a3b098d83 ]---