=====================================
[ BUG: bad unlock balance detected! ]
4.4.114-g4e74e98 #5 Not tainted
-------------------------------------
syz-executor1/4754 is trying to release lock (mrt_lock) at:
[<ffffffff833c7904>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
but there are no more locks to release!

other info that might help us debug this:
2 locks held by syz-executor1/4754:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff8157ac1f>] __fdget_pos+0x9f/0xc0 fs/file.c:780
 #1:  (&p->lock){+.+.+.}, at: [<ffffffff8158d6cd>] seq_read+0xdd/0x1270 fs/seq_file.c:178

stack backtrace:
CPU: 0 PID: 4754 Comm: syz-executor1 Not tainted 4.4.114-g4e74e98 #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 7cdb92626ff07989 ffff8800b9437920 ffffffff81d03d2d
 ffffffff84771c98 ffff8801bdc33000 ffffffff833c7904 ffffffff84771c98
 ffff8801bdc338a8 ffff8800b9437950 ffffffff81233354 dffffc0000000000
Call Trace:
 [<ffffffff81d03d2d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d03d2d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81233354>] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3266
 [<ffffffff8123e1ea>] __lock_release kernel/locking/lockdep.c:3408 [inline]
 [<ffffffff8123e1ea>] lock_release+0x72a/0xc10 kernel/locking/lockdep.c:3611
 [<ffffffff83773bda>] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline]
 [<ffffffff83773bda>] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255
 [<ffffffff833c7904>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
 [<ffffffff8158e070>] seq_read+0xa80/0x1270 fs/seq_file.c:283
 [<ffffffff81665d1f>] proc_reg_read+0xef/0x170 fs/proc/inode.c:202
 [<ffffffff8151d891>] do_loop_readv_writev+0x141/0x1e0 fs/read_write.c:680
 [<ffffffff8151fbed>] do_readv_writev+0x5dd/0x6e0 fs/read_write.c:810
 [<ffffffff8151fd68>] vfs_readv+0x78/0xb0 fs/read_write.c:834
 [<ffffffff81522099>] SYSC_readv fs/read_write.c:860 [inline]
 [<ffffffff81522099>] SyS_readv+0xd9/0x240 fs/read_write.c:852
 [<ffffffff837742df>] entry_SYSCALL_64_fastpath+0x1c/0x98
BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor2/6323
caller is __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
CPU: 0 PID: 6323 Comm: syz-executor2 Not tainted 4.4.114-g4e74e98 #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 3b6af1c52d02ace4 ffff8800ad45f6c8 ffffffff81d03d2d
 0000000000000000 ffffffff839fe3a0 ffffffff83d0b920 ffff8801d934c800
 0000000000000003 ffff8800ad45f708 ffffffff81d63c74 ffff8800ad45f720
Call Trace:
 [<ffffffff81d03d2d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d03d2d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81d63c74>] check_preemption_disabled+0x1d4/0x200 lib/smp_processor_id.c:46
 [<ffffffff81d63cdc>] __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
 [<ffffffff832e25e8>] ipcomp_alloc_tfms net/xfrm/xfrm_ipcomp.c:286 [inline]
 [<ffffffff832e25e8>] ipcomp_init_state+0x188/0x980 net/xfrm/xfrm_ipcomp.c:363
 [<ffffffff8324a3b0>] ipcomp4_init_state+0xb0/0x7d0 net/ipv4/ipcomp.c:137
 [<ffffffff832c0f57>] __xfrm_init_state+0x3e7/0xb30 net/xfrm/xfrm_state.c:2058
 [<ffffffff832c16ba>] xfrm_init_state+0x1a/0x20 net/xfrm/xfrm_state.c:2084
 [<ffffffff83445f0b>] pfkey_msg2xfrm_state net/key/af_key.c:1289 [inline]
 [<ffffffff83445f0b>] pfkey_add+0x1fbb/0x3490 net/key/af_key.c:1506
 [<ffffffff83449b4b>] pfkey_process+0x68b/0x750 net/key/af_key.c:2834
 [<ffffffff8344b3a9>] pfkey_sendmsg+0x3a9/0x760 net/key/af_key.c:3678
 [<ffffffff82deb79a>] sock_sendmsg_nosec net/socket.c:625 [inline]
 [<ffffffff82deb79a>] sock_sendmsg+0xca/0x110 net/socket.c:635
 [<ffffffff82ded371>] ___sys_sendmsg+0x6c1/0x7c0 net/socket.c:1962
 [<ffffffff82def3c3>] __sys_sendmsg+0xd3/0x190 net/socket.c:1996
 [<ffffffff82def4ad>] SYSC_sendmsg net/socket.c:2007 [inline]
 [<ffffffff82def4ad>] SyS_sendmsg+0x2d/0x50 net/socket.c:2003
 [<ffffffff837742df>] entry_SYSCALL_64_fastpath+0x1c/0x98
BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor5/6449
caller is __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
CPU: 1 PID: 6449 Comm: syz-executor5 Not tainted 4.4.114-g4e74e98 #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 78313b3659c148bf ffff8800b722f6c8 ffffffff81d03d2d
 0000000000000001 ffffffff839fe3a0 ffffffff83d0b920 ffff8801cdaf3000
 0000000000000003 ffff8800b722f708 ffffffff81d63c74 ffff8800b722f720
Call Trace:
 [<ffffffff81d03d2d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d03d2d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81d63c74>] check_preemption_disabled+0x1d4/0x200 lib/smp_processor_id.c:46
 [<ffffffff81d63cdc>] __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
 [<ffffffff832e25e8>] ipcomp_alloc_tfms net/xfrm/xfrm_ipcomp.c:286 [inline]
 [<ffffffff832e25e8>] ipcomp_init_state+0x188/0x980 net/xfrm/xfrm_ipcomp.c:363
 [<ffffffff8324a3b0>] ipcomp4_init_state+0xb0/0x7d0 net/ipv4/ipcomp.c:137
 [<ffffffff832c0f57>] __xfrm_init_state+0x3e7/0xb30 net/xfrm/xfrm_state.c:2058
 [<ffffffff832c16ba>] xfrm_init_state+0x1a/0x20 net/xfrm/xfrm_state.c:2084
 [<ffffffff83445f0b>] pfkey_msg2xfrm_state net/key/af_key.c:1289 [inline]
 [<ffffffff83445f0b>] pfkey_add+0x1fbb/0x3490 net/key/af_key.c:1506
 [<ffffffff83449b4b>] pfkey_process+0x68b/0x750 net/key/af_key.c:2834
 [<ffffffff8344b3a9>] pfkey_sendmsg+0x3a9/0x760 net/key/af_key.c:3678
 [<ffffffff82deb79a>] sock_sendmsg_nosec net/socket.c:625 [inline]
 [<ffffffff82deb79a>] sock_sendmsg+0xca/0x110 net/socket.c:635
 [<ffffffff82ded371>] ___sys_sendmsg+0x6c1/0x7c0 net/socket.c:1962
 [<ffffffff82def3c3>] __sys_sendmsg+0xd3/0x190 net/socket.c:1996
 [<ffffffff82def4ad>] SYSC_sendmsg net/socket.c:2007 [inline]
 [<ffffffff82def4ad>] SyS_sendmsg+0x2d/0x50 net/socket.c:2003
 [<ffffffff837742df>] entry_SYSCALL_64_fastpath+0x1c/0x98
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
program syz-executor7 is using a deprecated SCSI ioctl, please convert it to SG_IO
sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0