===================================== [ BUG: bad unlock balance detected! ] device gre0 entered promiscuous mode 4.9.75-g5f5e5d4 #7 Not tainted ------------------------------------- syz-executor3/32013 is trying to release lock (mrt_lock) at: [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 but there are no more locks to release! other info that might help us debug this: 1 lock held by syz-executor3/32013: #0: (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x1290 fs/seq_file.c:178 stack backtrace: CPU: 1 PID: 32013 Comm: syz-executor3 Not tainted 4.9.75-g5f5e5d4 #7 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801c46bf860 ffffffff81d93049 ffffffff849b67b8 ffff8801cd6bb000 ffffffff834e6574 ffffffff849b67b8 ffff8801cd6bb888 ffff8801c46bf890 ffffffff81236bf4 dffffc0000000000 ffffffff849b67b8 00000000ffffffff Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3398 [] __lock_release kernel/locking/lockdep.c:3540 [inline] [] lock_release+0x6f8/0xb80 kernel/locking/lockdep.c:3775 [] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline] [] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255 [] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553 [] traverse+0x3a7/0x900 fs/seq_file.c:148 [] seq_read+0x7ea/0x1290 fs/seq_file.c:195 [] proc_reg_read+0xef/0x170 fs/proc/inode.c:202 [] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714 [] do_loop_readv_writev fs/read_write.c:880 [inline] [] do_readv_writev+0x520/0x750 fs/read_write.c:874 [] vfs_readv+0x84/0xc0 fs/read_write.c:898 [] do_preadv+0x115/0x1a0 fs/read_write.c:975 [] SYSC_preadv fs/read_write.c:1025 [inline] [] SyS_preadv+0x30/0x40 fs/read_write.c:1020 [] entry_SYSCALL_64_fastpath+0x23/0xe2 : renamed from syz6 : renamed from syz6 device gre0 entered promiscuous mode : renamed from syz6 : renamed from syz6 : renamed from syz6 : renamed from syz6 : renamed from syz6 : renamed from syz5 : renamed from syz6 : renamed from syz5 : renamed from syz6 : renamed from syz6 : renamed from syz5 : renamed from syz5 : renamed from syz6 : renamed from syz6 : renamed from syz5 : renamed from syz6 : renamed from syz6 : renamed from syz6 : renamed from syz6 : renamed from syz1 : renamed from syz6 : renamed from syz1 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60973 sclass=netlink_xfrm_socket pig=478 comm=syz-executor4 : renamed from syz1 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60973 sclass=netlink_xfrm_socket pig=492 comm=syz-executor4 : renamed from syz6 : renamed from syz1 : renamed from syz6 : renamed from syz1 : renamed from syz6 : renamed from syz6 : renamed from syz6 : renamed from syz5 : renamed from syz6 : renamed from syz6 : renamed from syz5 : renamed from syz6 : renamed from syz5 : renamed from syz5 : renamed from syz6 : renamed from syz6 : renamed from syz5 : renamed from syz5 : renamed from syz6 : renamed from syz5 : renamed from syz6 : renamed from syz5 : renamed from syz3 : renamed from syz5 : renamed from syz6 : renamed from syz3 : renamed from syz5 Tx-ring is not supported. : renamed from syz5 : renamed from syz3 : renamed from syz6 : renamed from syz6 : renamed from syz5 : renamed from syz3 : renamed from syz5 : renamed from syz3 : renamed from syz5 : renamed from syz5 : renamed from syz6 : renamed from syz5 : renamed from syz6 audit: type=1400 audit(1515412682.175:52): avc: denied { fsetid } for pid=1317 comm="syz-executor7" capability=4 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1515412682.205:53): avc: denied { dac_read_search } for pid=1317 comm="syz-executor7" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 : renamed from syz4 : renamed from syz6 : renamed from syz4 : renamed from syz5 : renamed from syz6 : renamed from syz5 : renamed from syz3 : renamed from syz4 : renamed from syz6 : renamed from syz4 : renamed from syz3 : renamed from syz5 : renamed from syz5 : renamed from syz4 : renamed from syz6 : renamed from syz3 : renamed from syz5 : renamed from syz6 : renamed from syz3 : renamed from syz4 : renamed from syz5 : renamed from syz4 : renamed from syz3 : renamed from syz7 : renamed from syz5 : renamed from syz4 : renamed from syz7 : renamed from syz6 : renamed from syz3 : renamed from syz2 : renamed from syz5