INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added 'ci-android-49-kasan-gce-3,10.128.0.42' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   20.356318] 
[   20.356640] =====================================
[   20.357299] [ BUG: bad unlock balance detected! ]
[   20.357956] 4.9.67-gf26d3c7 #106 Not tainted
[   20.358541] -------------------------------------
[   20.359184] syzkaller033441/3274 is trying to release lock (mrt_lock) at:
[   20.360202] [<ffffffff834dec54>] ipmr_mfc_seq_stop+0xe4/0x140
[   20.360975] but there are no more locks to release!
[   20.361637] 
[   20.361637] other info that might help us debug this:
[   20.362515] 1 lock held by syzkaller033441/3274:
[   20.363201]  #0:  (&p->lock){+.+.+.}, at: [<ffffffff815e4cdd>] seq_read+0xdd/0x1290
[   20.364382] 
[   20.364382] stack backtrace:
[   20.365045] CPU: 0 PID: 3274 Comm: syzkaller033441 Not tainted 4.9.67-gf26d3c7 #106
[   20.366083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   20.367305]  ffff8801d80df918 ffffffff81d906e9 ffffffff849ae8f8 ffff8801ccae1800
[   20.368450]  ffffffff834dec54 ffffffff849ae8f8 ffff8801ccae2088 ffff8801d80df948
[   20.369591]  ffffffff812353f4 dffffc0000000000 ffffffff849ae8f8 00000000ffffffff
[   20.370762] Call Trace:
[   20.371122]  [<ffffffff81d906e9>] dump_stack+0xc1/0x128
[   20.371849]  [<ffffffff834dec54>] ? ipmr_mfc_seq_stop+0xe4/0x140
[   20.372663]  [<ffffffff812353f4>] print_unlock_imbalance_bug+0x174/0x1a0
[   20.373600]  [<ffffffff8123dec8>] lock_release+0x6f8/0xb80
[   20.374373]  [<ffffffff815399b5>] ? memcpy+0x45/0x50
[   20.375068]  [<ffffffff834dec54>] ? ipmr_mfc_seq_stop+0xe4/0x140
[   20.375909]  [<ffffffff838a951a>] _raw_read_unlock+0x1a/0x50
[   20.376675]  [<ffffffff834dec54>] ipmr_mfc_seq_stop+0xe4/0x140
[   20.382615]  [<ffffffff815e1c97>] traverse+0x3a7/0x900
[   20.387860]  [<ffffffff815e18f0>] ? seq_buf_alloc+0x80/0x80
[   20.393536]  [<ffffffff815e53ea>] seq_read+0x7ea/0x1290
[   20.398864]  [<ffffffff81239a99>] ? __lock_acquire+0x629/0x3640
[   20.404889]  [<ffffffff815e4c00>] ? seq_escape+0x200/0x200
[   20.410480]  [<ffffffff815e4c00>] ? seq_escape+0x200/0x200
[   20.416071]  [<ffffffff816be32f>] proc_reg_read+0xef/0x170
[   20.421672]  [<ffffffff816be240>] ? proc_reg_write+0x170/0x170
[   20.427609]  [<ffffffff815680d3>] __vfs_read+0x103/0x670
[   20.433024]  [<ffffffff81567fd0>] ? default_llseek+0x290/0x290
[   20.438963]  [<ffffffff8163f5e6>] ? fsnotify+0x86/0xf30
[   20.444292]  [<ffffffff81640490>] ? fsnotify+0xf30/0xf30
[   20.449708]  [<ffffffff81bd7d59>] ? avc_policy_seqno+0x9/0x20
[   20.455561]  [<ffffffff81be86a2>] ? selinux_file_permission+0x82/0x460
[   20.462194]  [<ffffffff81bcee19>] ? security_file_permission+0x89/0x1e0
[   20.468915]  [<ffffffff8156bb85>] ? rw_verify_area+0xe5/0x2b0
[   20.474771]  [<ffffffff8156be6e>] vfs_read+0x11e/0x380
[   20.480017]  [<ffffffff8156ff5f>] SyS_pread64+0x13f/0x170
[   20.485521]  [<ffffffff8156fe20>] ? SyS_write+0x1b0/0x1b0
[   20.491026]  [<ffffffff81238c3b>] ? trace_hardirqs_on_caller+0x38b/0x590
[   20.497833]  [<ffffffff8100301a>] ? trace_hardirqs_on_thunk+0x1a/0x1c
[   20.504383]  [<ffffffff838a