netlink: 28 bytes leftover after parsing attributes in process `syz-executor3'.

=====================================
[ BUG: bad unlock balance detected! ]
4.4.113-g202e079 #1 Not tainted
netlink: 28 bytes leftover after parsing attributes in process `syz-executor3'.
-------------------------------------
syz-executor1/11020 is trying to release lock (mrt_lock) at:
[<ffffffff833c5524>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
but there are no more locks to release!

other info that might help us debug this:
1 lock held by syz-executor1/11020:
 #0:  (&p->lock){+.+.+.}, at: [<ffffffff8158c14d>] seq_read+0xdd/0x1270 fs/seq_file.c:178

stack backtrace:
CPU: 1 PID: 11020 Comm: syz-executor1 Not tainted 4.4.113-g202e079 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 e176be34b63ffc00 ffff8801cee67930 ffffffff81d0278d
 ffffffff84771c18 ffff8801cde48000 ffffffff833c5524 ffffffff84771c18
 ffff8801cde48848 ffff8801cee67960 ffffffff81232314 dffffc0000000000
Call Trace:
 [<ffffffff81d0278d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d0278d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
IPv4: Oversized IP packet from 127.0.0.1
IPv4: Oversized IP packet from 127.0.0.1
 [<ffffffff81232314>] print_unlock_imbalance_bug+0x174/0x1a0 kernel/locking/lockdep.c:3266
 [<ffffffff8123d1aa>] __lock_release kernel/locking/lockdep.c:3408 [inline]
 [<ffffffff8123d1aa>] lock_release+0x72a/0xc10 kernel/locking/lockdep.c:3611
 [<ffffffff8377145a>] __raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline]
 [<ffffffff8377145a>] _raw_read_unlock+0x1a/0x50 kernel/locking/spinlock.c:255
 [<ffffffff833c5524>] ipmr_mfc_seq_stop+0xe4/0x140 net/ipv6/ip6mr.c:553
 [<ffffffff8158caf0>] seq_read+0xa80/0x1270 fs/seq_file.c:283
 [<ffffffff8166479f>] proc_reg_read+0xef/0x170 fs/proc/inode.c:202
 [<ffffffff8151c561>] do_loop_readv_writev+0x141/0x1e0 fs/read_write.c:680
 [<ffffffff8151e8bd>] do_readv_writev+0x5dd/0x6e0 fs/read_write.c:810
 [<ffffffff8151ea38>] vfs_readv+0x78/0xb0 fs/read_write.c:834
 [<ffffffff815212a9>] SYSC_preadv fs/read_write.c:912 [inline]
 [<ffffffff815212a9>] SyS_preadv+0x199/0x230 fs/read_write.c:898
 [<ffffffff83771b5f>] entry_SYSCALL_64_fastpath+0x1c/0x98
audit: type=1326 audit(1517213674.962:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11125 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0x0
device gre0 entered promiscuous mode
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 11153 Comm: syz-executor5 Not tainted 4.4.113-g202e079 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 eb329d409254a377 ffff8801c52c76d0 ffffffff81d0278d
 ffff8801ceea4600 1ffff10038a58ee7 ffff8801c52c7858 0000000000000000
 0000000000000000 ffff8801c52c7880 ffffffff81605d55 ffffffff812363c0
Call Trace:
 [<ffffffff81d0278d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d0278d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81605d55>] handle_userfault+0x715/0xf50 fs/userfaultfd.c:316
 [<ffffffff814a1ca8>] do_anonymous_page mm/memory.c:2731 [inline]
 [<ffffffff814a1ca8>] handle_pte_fault mm/memory.c:3295 [inline]
 [<ffffffff814a1ca8>] __handle_mm_fault mm/memory.c:3426 [inline]
 [<ffffffff814a1ca8>] handle_mm_fault+0x2938/0x3190 mm/memory.c:3455
 [<ffffffff810dc6cb>] __do_page_fault+0x35b/0xa00 arch/x86/mm/fault.c:1245
 [<ffffffff810dcd97>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1308
 [<ffffffff83772f88>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1033
 [<ffffffff815588ca>] vfs_ioctl fs/ioctl.c:43 [inline]
 [<ffffffff815588ca>] do_vfs_ioctl+0x7aa/0xee0 fs/ioctl.c:607
 [<ffffffff8155908f>] SYSC_ioctl fs/ioctl.c:622 [inline]
 [<ffffffff8155908f>] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:613
 [<ffffffff83771b5f>] entry_SYSCALL_64_fastpath+0x1c/0x98
CPU: 1 PID: 11161 Comm: syz-executor5 Not tainted 4.4.113-g202e079 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 9d3340deeaed93a6 ffff8801ce7b77d0 ffffffff81d0278d
 ffff8801ceea4600 1ffff10039cf6f07 ffff8801ce7b7958 0000000000000000
 0000000000000000 ffff8801ce7b7980 ffffffff81605d55 ffffffff812363c0
Call Trace:
 [<ffffffff81d0278d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d0278d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81605d55>] handle_userfault+0x715/0xf50 fs/userfaultfd.c:316
 [<ffffffff814a1ca8>] do_anonymous_page mm/memory.c:2731 [inline]
 [<ffffffff814a1ca8>] handle_pte_fault mm/memory.c:3295 [inline]
 [<ffffffff814a1ca8>] __handle_mm_fault mm/memory.c:3426 [inline]
 [<ffffffff814a1ca8>] handle_mm_fault+0x2938/0x3190 mm/memory.c:3455
 [<ffffffff810dc6cb>] __do_page_fault+0x35b/0xa00 arch/x86/mm/fault.c:1245
 [<ffffffff810dcd97>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1308
 [<ffffffff83772f88>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1033
 [<ffffffff8155d31a>] SYSC_select fs/select.c:640 [inline]
 [<ffffffff8155d31a>] SyS_select+0x14a/0x1d0 fs/select.c:622
 [<ffffffff83771b5f>] entry_SYSCALL_64_fastpath+0x1c/0x98
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 11153 Comm: syz-executor5 Not tainted 4.4.113-g202e079 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 eb329d409254a377 ffff8801c52c76d0 ffffffff81d0278d
 ffff8801ceea4000 1ffff10038a58ee7 ffff8801c52c7858 0000000000000000
 0000000000000000 ffff8801c52c7880 ffffffff81605d55 ffffffff812363c0
Call Trace:
 [<ffffffff81d0278d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d0278d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81605d55>] handle_userfault+0x715/0xf50 fs/userfaultfd.c:316
 [<ffffffff814a1ca8>] do_anonymous_page mm/memory.c:2731 [inline]
 [<ffffffff814a1ca8>] handle_pte_fault mm/memory.c:3295 [inline]
 [<ffffffff814a1ca8>] __handle_mm_fault mm/memory.c:3426 [inline]
 [<ffffffff814a1ca8>] handle_mm_fault+0x2938/0x3190 mm/memory.c:3455
 [<ffffffff810dc6cb>] __do_page_fault+0x35b/0xa00 arch/x86/mm/fault.c:1245
 [<ffffffff810dcd97>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1308
 [<ffffffff83772f88>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1033
 [<ffffffff815588ca>] vfs_ioctl fs/ioctl.c:43 [inline]
 [<ffffffff815588ca>] do_vfs_ioctl+0x7aa/0xee0 fs/ioctl.c:607
 [<ffffffff8155908f>] SYSC_ioctl fs/ioctl.c:622 [inline]
 [<ffffffff8155908f>] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:613
 [<ffffffff83771b5f>] entry_SYSCALL_64_fastpath+0x1c/0x98
CPU: 1 PID: 11161 Comm: syz-executor5 Not tainted 4.4.113-g202e079 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 9d3340deeaed93a6 ffff8801ce7b77d0 ffffffff81d0278d
 ffff8801ceea4000 1ffff10039cf6f07 ffff8801ce7b7958 0000000000000000
 0000000000000000 ffff8801ce7b7980 ffffffff81605d55 ffffffff812363c0
Call Trace:
 [<ffffffff81d0278d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d0278d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81605d55>] handle_userfault+0x715/0xf50 fs/userfaultfd.c:316
 [<ffffffff814a1ca8>] do_anonymous_page mm/memory.c:2731 [inline]
 [<ffffffff814a1ca8>] handle_pte_fault mm/memory.c:3295 [inline]
 [<ffffffff814a1ca8>] __handle_mm_fault mm/memory.c:3426 [inline]
 [<ffffffff814a1ca8>] handle_mm_fault+0x2938/0x3190 mm/memory.c:3455
 [<ffffffff810dc6cb>] __do_page_fault+0x35b/0xa00 arch/x86/mm/fault.c:1245
 [<ffffffff810dcd97>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1308
 [<ffffffff83772f88>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1033
 [<ffffffff8155d31a>] SYSC_select fs/select.c:640 [inline]
 [<ffffffff8155d31a>] SyS_select+0x14a/0x1d0 fs/select.c:622
 [<ffffffff83771b5f>] entry_SYSCALL_64_fastpath+0x1c/0x98
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
audit: type=1400 audit(1517213679.502:32): avc:  denied  { attach_queue } for  pid=12085 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tun_socket permissive=1
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
audit: type=1400 audit(1517213680.052:33): avc:  denied  { getattr } for  pid=12271 comm="syz-executor2" path="socket:[21963]" dev="sockfs" ino=21963 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
audit: type=1400 audit(1517213680.272:34): avc:  denied  { create } for  pid=12332 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1
program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO
sock: process `syz-executor0' is using obsolete setsockopt SO_BSDCOMPAT
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
sg_write: data in/out 524252/147 bytes for SCSI command 0x27-- guessing data in;
   program syz-executor5 not setting count and/or reply_len properly
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode
device gre0 entered promiscuous mode