=====================================
[ BUG: bad unlock balance detected! ]
4.4.113-g202e079 #1 Not tainted
-------------------------------------
syz-executor3/7921 is trying to release lock (mrt_lock) at:
[<ffffffff833c5524>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
but there are no more locks to release!

other info that might help us debug this:
1 lock held by syz-executor3/7921:
 #0:  (&p->lock){+.+.+.}, at: [<ffffffff8158c14d>] seq_read+0xdd/0x1270 fs/seq_file.c:178

stack backtrace:
CPU: 0 PID: 7921 Comm: syz-executor3 Not tainted 4.4.113-g202e079 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 3e7c73b7325ed52f ffff8801d556f930 ffffffff81d0278d
 ffffffff84771c18 ffff8801d9ba17c0 ffffffff833c5524 ffffffff84771c18
 ffff8801d9ba2008 ffff8801d556f960 ffffffff81232314 dffffc0000000000
Call Trace:
 [<ffffffff81d0278d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d0278d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81232314>] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3266
 [<ffffffff8123d1aa>] __lock_release kernel/locking/lockdep.c:3408 [inline]
 [<ffffffff8123d1aa>] lock_release+0x72a/0xc10 kernel/locking/lockdep.c:3611
 [<ffffffff8377145a>] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline]
 [<ffffffff8377145a>] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255
 [<ffffffff833c5524>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
 [<ffffffff8158caf0>] seq_read+0xa80/0x1270 fs/seq_file.c:283
 [<ffffffff8166479f>] proc_reg_read+0xef/0x170 fs/proc/inode.c:202
 [<ffffffff8151c561>] do_loop_readv_writev+0x141/0x1e0 fs/read_write.c:680
 [<ffffffff8151e8bd>] do_readv_writev+0x5dd/0x6e0 fs/read_write.c:810
 [<ffffffff8151ea38>] vfs_readv+0x78/0xb0 fs/read_write.c:834
 [<ffffffff815212a9>] SYSC_preadv fs/read_write.c:912 [inline]
 [<ffffffff815212a9>] SyS_preadv+0x199/0x230 fs/read_write.c:898
 [<ffffffff83771b5f>] entry_SYSCALL_64_fastpath+0x1c/0x98
binder: 9253:9275 Release 1 refcount change on invalid ref 0 ret -22
binder: 9253:9289 Release 1 refcount change on invalid ref 0 ret -22
binder: 9299:9322 Release 1 refcount change on invalid ref 0 ret -22
audit: type=1326 audit(1517156866.289:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10589 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0x0
audit: type=1326 audit(1517156866.349:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10589 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0x0