2017/08/12 12:06:40 parsed 1 programs 2017/08/12 12:06:40 executed programs: 0 syzkaller login: [ 17.887734] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 17.888572] in_atomic(): 1, irqs_disabled(): 0, pid: 3168, name: syz-executor0 [ 17.889212] 3 locks held by syz-executor0/3168: [ 17.889591] #0: (&net->xfrm.xfrm_cfg_mutex){+.+.}, at: [] pfkey_sendmsg+0x4c8/0x9f0 [ 17.891520] #1: (&pfk->dump_lock){+.+.}, at: [] pfkey_do_dump+0x76/0x3f0 [ 17.893792] #2: (&(&net->xfrm.xfrm_policy_lock)->rlock){+...}, at: [] xfrm_policy_walk+0x192/0xa30 [ 17.895999] CPU: 1 PID: 3168 Comm: syz-executor0 Not tainted 4.13.0-rc4-next-20170811 #1 [ 17.897483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 17.898534] Call Trace: [ 17.898902] dump_stack+0x194/0x257 [ 17.899460] ? arch_local_irq_restore+0x53/0x53 [ 17.900181] ? print_lock+0x9f/0xa2 [ 17.900767] ? lockdep_print_held_locks+0xc4/0x130 [ 17.901764] ___might_sleep+0x2b2/0x470 [ 17.902548] ? check_same_owner+0x320/0x320 [ 17.903393] __might_sleep+0x95/0x190 [ 17.904173] kmem_cache_alloc+0x252/0x6f0 [ 17.904929] ? sock_def_readable+0x26f/0x5e0 [ 17.905738] skb_clone+0x1ae/0x480 [ 17.906434] ? skb_split+0x1310/0x1310 [ 17.907207] ? refcount_sub_and_test+0x115/0x1b0 [ 17.908088] ? refcount_inc_not_zero+0xfe/0x180 [ 17.908975] ? refcount_add+0x60/0x60 [ 17.909708] ? find_held_lock+0x35/0x1d0 [ 17.910509] pfkey_broadcast_one+0x4b2/0x6f0 [ 17.911367] ? pfkey_terminate_dump+0x180/0x180 [ 17.912189] ? __lock_is_held+0xb6/0x140 [ 17.912965] pfkey_broadcast+0x4ba/0x770 [ 17.915071] ? pfkey_acquire+0x220/0x220 [ 17.916146] ? memset+0x31/0x40 [ 17.916898] ? pfkey_xfrm_policy2msg+0x183e/0x2330 [ 17.917947] ? pfkey_sockaddr_fill+0x340/0x340 [ 17.918736] ? check_noncircular+0x20/0x20 [ 17.919488] ? pfkey_xfrm_policy2msg_size+0x1d3/0x230 [ 17.920465] dump_sp+0x3d6/0x500 [ 17.920874] ? pfkey_flush+0x3c0/0x3c0 [ 17.921471] ? xfrm_policy_walk+0x192/0xa30 [ 17.922142] xfrm_policy_walk+0x2f1/0xa30 [ 17.922706] ? pfkey_flush+0x3c0/0x3c0 [ 17.923237] ? xfrm_audit_policy_delete+0x1f0/0x1f0 [ 17.923943] ? __kfree_skb+0x20/0x20 [ 17.924386] ? pfkey_terminate_dump+0x180/0x180 [ 17.924807] ? __lock_is_held+0xb6/0x140 [ 17.925176] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 17.925622] ? wait_for_completion+0x730/0x730 [ 17.926034] ? pfkey_acquire+0x220/0x220 [ 17.926454] ? pfkey_broadcast_one+0x6f0/0x6f0 [ 17.926950] pfkey_dump_sp+0x42/0x50 [ 17.927342] pfkey_do_dump+0xaa/0x3f0 [ 17.927694] ? xfrm_policy_walk_init+0x69/0x1c0 [ 17.928152] ? dump_sa+0x5d0/0x5d0 [ 17.928461] ? iov_iter_advance+0x2a1/0x13f0 [ 17.928845] pfkey_spddump+0x1a0/0x210 [ 17.929180] ? pfkey_recvmsg+0x710/0x710 [ 17.929532] pfkey_process+0x606/0x710 [ 17.929872] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 17.930302] ? kasan_check_write+0x14/0x20 [ 17.930682] ? dup_iter+0x260/0x260 [ 17.931001] pfkey_sendmsg+0x4d6/0x9f0 [ 17.931346] ? pfkey_spdget+0xb00/0xb00 [ 17.931692] ? selinux_socket_sendmsg+0x36/0x40 [ 17.932097] ? security_socket_sendmsg+0x89/0xb0 [ 17.932506] ? pfkey_spdget+0xb00/0xb00 [ 17.932853] sock_sendmsg+0xca/0x110 [ 17.933176] ___sys_sendmsg+0x742/0x8c0 [ 17.933523] ? copy_msghdr_from_user+0x590/0x590 [ 17.933867] ? fget_raw+0x20/0x20 [ 17.934125] ? sock_has_perm+0x29c/0x400 [ 17.934435] ? __fget_light+0x297/0x380 [ 17.934780] ? selinux_tun_dev_create+0xc0/0xc0 [ 17.935507] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 17.936029] ? __fdget+0x18/0x20 [ 17.936328] __sys_sendmsg+0xe5/0x210 [ 17.936658] ? __sys_sendmsg+0xe5/0x210 [ 17.937012] ? SyS_shutdown+0x290/0x290 [ 17.937365] ? SyS_futex+0x285/0x380 [ 17.937688] ? SyS_futex+0x28e/0x380 [ 17.938054] ? SyS_setsockopt+0x215/0x360 [ 17.938429] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 17.938872] SyS_sendmsg+0x2d/0x50 [ 17.939183] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 17.939594] RIP: 0033:0x446739 [ 17.939874] RSP: 002b:00007fe7832dac08 EFLAGS: 00000282 ORIG_RAX: 000000000000002e [ 17.940537] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000446739 [ 17.941158] RDX: 0000000000000000 RSI: 000000002023dfc8 RDI: 0000000000000008 [ 17.941780] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 17.942400] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 17.943024] R13: 0000000000000000 R14: 00007fe7832db9c0 R15: 00007fe7832db700