device lo left promiscuous mode

=====================================
[ BUG: bad unlock balance detected! ]
4.9.68-gfb66dc2 #107 Not tainted
-------------------------------------
syz-executor1/9059 is trying to release lock ([   50.317732] device gre0 left promiscuous mode
netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
device gre0 entered promiscuous mode
mrt_lock) at:
but there are no more locks to release!

other info that might help us debug this:
2 locks held by syz-executor1/9059:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815cfa5f>] __fdget_pos+0x9f/0xc0 fs/file.c:781
 #1:  (&p->lock){+.+.+.}, at: [<ffffffff815e4e5d>] seq_read+0xdd/0x1290 fs/seq_file.c:178

stack backtrace:
CPU: 1 PID: 9059 Comm: syz-executor1 Not tainted 4.9.68-gfb66dc2 #107
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d86378e8 ffffffff81d90889 ffffffff849ae9f8 ffff8801c12fc800
 ffffffff834dfc54 ffffffff849ae9f8 ffff8801c12fd088 ffff8801d8637918
 ffffffff812353f4 dffffc0000000000 ffffffff849ae9f8 00000000ffffffff
Call Trace:
 [<ffffffff81d90889>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d90889>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff812353f4>] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3398
 [<ffffffff8123dec8>] __lock_release kernel/locking/lockdep.c:3540 [inline]
 [<ffffffff8123dec8>] lock_release+0x6f8/0xb80 kernel/locking/lockdep.c:3775
 [<ffffffff838aa55a>] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline]
 [<ffffffff838aa55a>] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255
 [<ffffffff834dfc54>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
 [<ffffffff815e5803>] seq_read+0xa83/0x1290 fs/seq_file.c:283
 [<ffffffff816be4bf>] proc_reg_read+0xef/0x170 fs/proc/inode.c:202
 [<ffffffff81568e31>] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714
 [<ffffffff8156cca0>] do_loop_readv_writev fs/read_write.c:880 [inline]
 [<ffffffff8156cca0>] do_readv_writev+0x520/0x750 fs/read_write.c:874
 [<ffffffff8156cf54>] vfs_readv+0x84/0xc0 fs/read_write.c:898
 [<ffffffff8156d076>] do_readv+0xe6/0x250 fs/read_write.c:924
 [<ffffffff81570567>] SYSC_readv fs/read_write.c:1011 [inline]
 [<ffffffff81570567>] SyS_readv+0x27/0x30 fs/read_write.c:1008
 [<ffffffff838aa9c5>] entry_SYSCALL_64_fastpath+0x23/0xc6
loop: Write error at byte offset 0, length 512.
loop: Write error at byte offset 0, length 512.
loop: Write error at byte offset 0, length 512.
loop: Write error at byte offset 0, length 512.
VFS: Dirty inode writeback failed for block device loop4 (err=-5).
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 9156 Comm: syz-executor2 Not tainted 4.9.68-gfb66dc2 #107
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801ced674e0 ffffffff81d90889 ffff8801ced677c0 0000000000000000
 ffff8801ce46b310 ffff8801ced676b0 ffff8801ce46b200 ffff8801ced676d8
 ffffffff8165e497 ffff8801c1616000 ffff8801ced67630 00000001cfe73067
Call Trace:
 [<ffffffff81d90889>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d90889>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff8165e497>] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323
 [<ffffffff814cd771>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814cd771>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814cd771>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814cd771>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810dd452>] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406
 [<ffffffff810ddbf7>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469
 [<ffffffff838abb98>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff814311dc>] generic_perform_write+0x1dc/0x500 mm/filemap.c:2731
 [<ffffffff81438db8>] __generic_file_write_iter+0x348/0x570 mm/filemap.c:2866
 [<ffffffff814392b5>] generic_file_write_iter+0x2d5/0x600 mm/filemap.c:2894
 [<ffffffff8156aaaf>] new_sync_write fs/read_write.c:499 [inline]
 [<ffffffff8156aaaf>] __vfs_write+0x4bf/0x680 fs/read_write.c:512
 [<ffffffff8156c3d9>] vfs_write+0x189/0x530 fs/read_write.c:560
 [<ffffffff8156fec9>] SYSC_write fs/read_write.c:607 [inline]
 [<ffffffff8156fec9>] SyS_write+0xd9/0x1b0 fs/read_write.c:599
 [<ffffffff838aa9c5>] entry_SYSCALL_64_fastpath+0x23/0xc6
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 10841 Comm: syz-executor7 Not tainted 4.9.68-gfb66dc2 #107
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801c19d74e0 ffffffff81d90889 ffff8801c19d77c0 0000000000000000
 ffff8801d4cd9910 ffff8801c19d76b0 ffff8801d4cd9800 ffff8801c19d76d8
 ffffffff8165e497 ffff8801d54c8000 ffff8801c19d7630 00000001a98b7067
Call Trace:
 [<ffffffff81d90889>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d90889>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff8165e497>] handle_userfault+0xa37/0x1300 fs/userfaultfd.c:323
 [<ffffffff814cd771>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814cd771>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814cd771>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814cd771>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810dd452>] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1406
 [<ffffffff810ddbf7>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1469
 [<ffffffff838abb98>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff814311dc>] generic_perform_write+0x1dc/0x500 mm/filemap.c:2731
 [<ffffffff81438db8>] __generic_file_write_iter+0x348/0x570 mm/filemap.c:2866
 [<ffffffff814392b5>] generic_file_write_iter+0x2d5/0x600 mm/filemap.c:2894
 [<ffffffff8156aaaf>] new_sync_write fs/read_write.c:499 [inline]
 [<ffffffff8156aaaf>] __vfs_write+0x4bf/0x680 fs/read_write.c:512
 [<ffffffff8156c3d9>] vfs_write+0x189/0x530 fs/read_write.c:560
 [<ffffffff8156fec9>] SYSC_write fs/read_write.c:607 [inline]
 [<ffffffff8156fec9>] SyS_write+0xd9/0x1b0 fs/read_write.c:599
 [<ffffffff838aa9c5>] entry_SYSCALL_64_fastpath+0x23/0xc6
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
audit: type=1400 audit(1513123152.988:50): avc:  denied  { fsetid } for  pid=10973 comm="syz-executor6" capability=4  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
audit: type=1400 audit(1513123153.028:51): avc:  denied  { dac_read_search } for  pid=10973 comm="syz-executor6" capability=2  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'.
netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'.
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'.
device gre0 entered promiscuous mode
netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'.
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
binder: 12375:12378 ioctl 4c00 13 returned -22
binder: 12375:12378 ioctl 4c00 15 returned -22
binder: BINDER_SET_CONTEXT_MGR already set
binder: 12375:12380 ioctl 40046207 0 returned -16
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
keychord: unsupported version 0
keychord: unsupported version 0
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
keychord: unsupported version 0
keychord: unsupported version 0