===================================== [ BUG: bad unlock balance detected! ] 4.9.75-g5f5e5d4 #17 Not tainted ------------------------------------- syz-executor4/24022 is trying to release lock (mrt_lock) at: [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 but there are no more locks to release! other info that might help us debug this: 2 locks held by syz-executor4/24022: #0: (sb_writers#7){.+.+.+}, at: [] file_start_write include/linux/fs.h:2619 [inline] #0: (sb_writers#7){.+.+.+}, at: [] do_sendfile+0x9ff/0xd30 fs/read_write.c:1400 #1: (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x1290 fs/seq_file.c:178 stack backtrace: CPU: 0 PID: 24022 Comm: syz-executor4 Not tainted 4.9.75-g5f5e5d4 #17 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801b42c7238 ffffffff81d93049 ffffffff849b67b8 ffff8801b9176000 ffffffff834e6574 ffffffff849b67b8 ffff8801b9176888 ffff8801b42c7268 ffffffff81236bf4 dffffc0000000000 ffffffff849b67b8 00000000ffffffff Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3398 [] __lock_release kernel/locking/lockdep.c:3540 [inline] [] lock_release+0x6f8/0xb80 kernel/locking/lockdep.c:3775 [] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline] [] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255 [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 [] seq_read+0xa83/0x1290 fs/seq_file.c:283 [] proc_reg_read+0xef/0x170 fs/proc/inode.c:202 [] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714 [] do_loop_readv_writev fs/read_write.c:880 [inline] [] do_readv_writev+0x520/0x750 fs/read_write.c:874 [] vfs_readv+0x84/0xc0 fs/read_write.c:898 [] kernel_readv fs/splice.c:363 [inline] [] default_file_splice_read+0x43f/0x7a0 fs/splice.c:435 [] do_splice_to+0x10a/0x160 fs/splice.c:899 [] splice_direct_to_actor+0x24d/0x800 fs/splice.c:971 [] do_splice_direct+0x1a7/0x270 fs/splice.c:1080 [] do_sendfile+0x54b/0xd30 fs/read_write.c:1401 [] C_SYSC_sendfile fs/read_write.c:1477 [inline] [] compat_SyS_sendfile+0xd1/0x160 fs/read_write.c:1466 [] do_syscall_32_irqs_on arch/x86/entry/common.c:322 [inline] [] do_fast_syscall_32+0x2f7/0x890 arch/x86/entry/common.c:384 [] entry_SYSENTER_compat+0x74/0x83 arch/x86/entry/entry_64_compat.S:127 device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode binder: 24154:24156 transaction failed 29201/-22, size 13645460921122816--4882560021241064767 line 3127 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 24154: binder_alloc_buf, no vma binder: 24154:24156 ioctl 40046207 0 returned -16 binder: 24154:24167 transaction failed 29189/-3, size 13645460921122816--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 device gre0 entered promiscuous mode device gre0 entered promiscuous mode binder: 24243:24249 transaction failed 29201/-22, size 13645460921122816--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29201 binder: 24277:24278 transaction failed 29201/-22, size 13645460921122816--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29201 binder: 24310:24313 transaction failed 29201/-22, size 13645460921122816--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 24344: binder_alloc_buf, no vma binder: 24344:24348 transaction failed 29189/-3, size 13645460921122816--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24357: binder_alloc_buf, no vma binder: 24357:24359 transaction failed 29189/-3, size 13645460921122816--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24399: binder_alloc_buf, no vma binder: 24399:24400 transaction failed 29189/-3, size 15897260734808064--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24410: binder_alloc_buf, no vma binder: 24410:24412 transaction failed 29189/-3, size 15897260734808064--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24445: binder_alloc_buf, no vma binder: 24445:24450 transaction failed 29189/-3, size 15897260734808064--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24479: binder_alloc_buf, no vma binder: 24479:24485 transaction failed 29189/-3, size 15897260734808064--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24514: binder_alloc_buf, no vma binder: 24514:24515 transaction failed 29189/-3, size 15897260734808064--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24548: binder_alloc_buf, no vma binder: 24548:24553 transaction failed 29189/-3, size 15897260734808064--4882560021241064767 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder: 24588:24594 transaction failed 29189/-22, size 15897260734808064--4882560021241064767 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 24618:24624 transaction failed 29189/-22, size 15897260734808064--4882560021241064767 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 24643:24651 transaction failed 29189/-22, size 15897260734808064--4882560021241064767 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24681: binder_alloc_buf, no vma binder: 24681:24687 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24717: binder_alloc_buf, no vma binder: 24717:24724 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder: 24748:24753 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 device gre0 entered promiscuous mode binder: 24769:24770 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 24778:24779 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 device gre0 entered promiscuous mode device gre0 entered promiscuous mode binder_alloc: 24841: binder_alloc_buf, no vma device gre0 entered promiscuous mode binder: 24841:24850 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24874: binder_alloc_buf, no vma binder: 24874:24875 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24882: binder_alloc_buf, no vma device gre0 entered promiscuous mode binder: 24882:24889 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24910: binder_alloc_buf, no vma binder: 24910:24912 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24931: binder_alloc_buf, no vma device gre0 entered promiscuous mode binder: 24931:24933 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 24962: binder_alloc_buf, no vma device gre0 entered promiscuous mode binder: 24962:24976 transaction failed 29189/-3, size 0-0 line 3127 binder: undelivered TRANSACTION_ERROR: 29189 device gre0 entered promiscuous mode device gre0 entered promiscuous mode binder: 25073:25075 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25080:25083 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25092:25103 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25113:25115 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25132:25139 transaction failed 29189/-22, size 0-0 line 3004 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=25138 comm=syz-executor3 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25180:25183 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25203:25205 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25234:25235 transaction failed 29189/-22, size 0-0 line 3004 binder: undelivered TRANSACTION_ERROR: 29189 binder: 25255:25257 transaction failed 29189/-22, size 0-0 line 3004 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=25259 comm=syz-executor4 binder: undelivered TRANSACTION_ERROR: 29189 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=25276 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=25302 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=25319 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=25342 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33281 sclass=netlink_route_socket pig=26882 comm=syz-executor3 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33281 sclass=netlink_route_socket pig=26882 comm=syz-executor3 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=26920 comm=syz-executor0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58102 sclass=netlink_route_socket pig=26936 comm=syz-executor0