=====================================
[ BUG: bad unlock balance detected! ]
4.4.111-g7902639 #18 Not tainted
-------------------------------------
syz-executor5/15624 is trying to release lock (mrt_lock) at:
[<ffffffff833c9304>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
but there are no more locks to release!
other info that might help us debug this:
1 lock held by syz-executor5/15624:
#0: (&p->lock){+.+.+.}, at: [<ffffffff8158ce7d>] seq_read+0xdd/0x1270 fs/seq_file.c:178
stack backtrace:
CPU: 0 PID: 15624 Comm: syz-executor5 Not tainted 4.4.111-g7902639 #18
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
0000000000000000 ca8333dea0c4b223 ffff8801d4a5f860 ffffffff81d0509d
ffffffff84770798 ffff8801d55b97c0 ffffffff833c9304 ffffffff84770798
ffff8801d55ba008 ffff8801d4a5f890 ffffffff81232374 dffffc0000000000
Call Trace:
[<ffffffff81d0509d>] __dump_stack lib/dump_stack.c:15 [inline]
[<ffffffff81d0509d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
[<ffffffff81232374>] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3266
[<ffffffff8123d21a>] __lock_release kernel/locking/lockdep.c:3408 [inline]
[<ffffffff8123d21a>] lock_release+0x72a/0xc10 kernel/locking/lockdep.c:3611
[<ffffffff8377519a>] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline]
[<ffffffff8377519a>] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255
[<ffffffff833c9304>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
[<ffffffff8158c487>] traverse+0x3a7/0x900 fs/seq_file.c:148
[<ffffffff8158d58a>] seq_read+0x7ea/0x1270 fs/seq_file.c:195
[<ffffffff81665cef>] proc_reg_read+0xef/0x170 fs/proc/inode.c:202
[<ffffffff8151c383>] __vfs_read+0x103/0x440 fs/read_write.c:432
[<ffffffff8151e223>] vfs_read+0x123/0x3a0 fs/read_write.c:454
[<ffffffff81520f2f>] SYSC_pread64 fs/read_write.c:607 [inline]
[<ffffffff81520f2f>] SyS_pread64+0x13f/0x170 fs/read_write.c:594
[<ffffffff81119b99>] sys32_pread+0x39/0x50 arch/x86/ia32/sys_ia32.c:179
[<ffffffff81006d84>] do_syscall_32_irqs_on arch/x86/entry/common.c:390 [inline]
[<ffffffff81006d84>] do_fast_syscall_32+0x314/0x890 arch/x86/entry/common.c:457
[<ffffffff8377722a>] sysenter_flags_fixed+0xd/0x17
audit: type=1326 audit(1515873997.025:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16440 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf771aba9 code=0x0
audit: type=1326 audit(1515873997.115:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16440 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf771aba9 code=0x0
audit: type=1326 audit(1515873997.885:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16811 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873998.055:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16869 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873998.235:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16893 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
tc_ctl_action: received NO action attribs
audit: type=1326 audit(1515873998.405:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16929 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
tc_ctl_action: received NO action attribs
audit: type=1326 audit(1515873998.545:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16988 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873998.705:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17006 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873998.875:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17064 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873999.005:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17105 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873999.185:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17147 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873999.305:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17193 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873999.465:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17233 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0
audit: type=1326 audit(1515873999.615:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17266 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7733ba9 code=0x0