INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-net-kasan-gce-3,10.128.0.41' (ECDSA) to the list of known hosts. 2017/08/11 22:02:38 parsed 1 programs 2017/08/11 22:02:38 executed programs: 0 syzkaller login: [ 33.548175] BUG: sleeping function called from invalid context at mm/slab.h:416 [ 33.549391] in_atomic(): 1, irqs_disabled(): 0, pid: 2992, name: syz-executor0 [ 33.550689] 3 locks held by syz-executor0/2992: [ 33.551328] #0: (&net->xfrm.xfrm_cfg_mutex){+.+.+.}, at: [] pfkey_sendmsg+0x4c8/0x9f0 [ 33.552661] #1: (&pfk->dump_lock){+.+.+.}, at: [] pfkey_do_dump+0x76/0x3f0 [ 33.553848] #2: (&(&net->xfrm.xfrm_policy_lock)->rlock){+...+.}, at: [] xfrm_policy_walk+0x192/0xa30 [ 33.555334] CPU: 1 PID: 2992 Comm: syz-executor0 Not tainted 4.13.0-rc4+ #1 [ 33.556318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.557876] Call Trace: [ 33.558301] dump_stack+0x194/0x257 [ 33.558809] ? arch_local_irq_restore+0x53/0x53 [ 33.559436] ? print_lock+0x9f/0xa2 [ 33.559930] ? lockdep_print_held_locks+0xc4/0x130 [ 33.560594] ___might_sleep+0x2b2/0x470 [ 33.561130] ? check_same_owner+0x320/0x320 [ 33.561711] ? mark_held_locks+0xaf/0x100 [ 33.562364] __might_sleep+0x95/0x190 [ 33.562880] kmem_cache_alloc+0x24b/0x6e0 [ 33.563504] ? sock_def_readable+0x26f/0x5e0 [ 33.564153] skb_clone+0x1ae/0x480 [ 33.564632] ? skb_split+0x1310/0x1310 [ 33.565232] ? refcount_sub_and_test+0x115/0x1b0 [ 33.565864] ? refcount_inc_not_zero+0xfe/0x180 [ 33.566587] ? refcount_add+0x60/0x60 [ 33.567120] ? find_held_lock+0x35/0x1d0 [ 33.567738] pfkey_broadcast_one+0x4b2/0x6f0 [ 33.568354] ? pfkey_terminate_dump+0x180/0x180 [ 33.573046] ? __lock_is_held+0xb6/0x140 [ 33.577096] pfkey_broadcast+0x4ba/0x770 [ 33.581135] ? pfkey_acquire+0x220/0x220 [ 33.585178] ? memset+0x31/0x40 [ 33.588434] ? pfkey_xfrm_policy2msg+0x183d/0x22b0 [ 33.593339] ? pfkey_sockaddr_fill+0x340/0x340 [ 33.597895] ? check_noncircular+0x20/0x20 [ 33.602116] ? pfkey_xfrm_policy2msg_size+0x1d3/0x230 [ 33.607280] dump_sp+0x3d6/0x500 [ 33.610626] ? pfkey_flush+0x3c0/0x3c0 [ 33.614490] ? xfrm_policy_walk+0x192/0xa30 [ 33.618786] xfrm_policy_walk+0x2f1/0xa30 [ 33.622916] ? pfkey_flush+0x3c0/0x3c0 [ 33.626776] ? xfrm_audit_policy_delete+0x1f0/0x1f0 [ 33.631767] ? __kfree_skb+0x20/0x20 [ 33.635454] ? pfkey_terminate_dump+0x180/0x180 [ 33.640094] ? __lock_is_held+0xb6/0x140 [ 33.644132] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 33.648946] ? wait_for_completion+0x730/0x730 [ 33.653500] ? pfkey_acquire+0x220/0x220 [ 33.657791] ? pfkey_broadcast_one+0x6f0/0x6f0 [ 33.662343] pfkey_dump_sp+0x42/0x50 [ 33.666025] pfkey_do_dump+0xaa/0x3f0 [ 33.669798] ? xfrm_policy_walk_init+0x69/0x1c0 [ 33.674452] ? dump_sa+0x5d0/0x5d0 [ 33.677964] ? iov_iter_advance+0x2a1/0x13f0 [ 33.682355] pfkey_spddump+0x1a0/0x210 [ 33.686208] ? pfkey_recvmsg+0x710/0x710 [ 33.690239] pfkey_process+0x606/0x710 [ 33.694103] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 33.699086] ? kasan_check_write+0x14/0x20 [ 33.703307] ? dup_iter+0x260/0x260 [ 33.706908] pfkey_sendmsg+0x4d6/0x9f0 [ 33.710784] ? pfkey_spdget+0xb00/0xb00 [ 33.714728] ? selinux_socket_sendmsg+0x36/0x40 [ 33.719378] ? security_socket_sendmsg+0x89/0xb0 [ 33.724099] ? pfkey_spdget+0xb00/0xb00 [ 33.728048] sock_sendmsg+0xca/0x110 [ 33.731735] ___sys_sendmsg+0x755/0x890 [ 33.735684] ? copy_msghdr_from_user+0x590/0x590 [ 33.740514] ? fget_raw+0x20/0x20 [ 33.743941] ? sock_has_perm+0x29c/0x400 [ 33.747968] ? __fget_light+0x297/0x380 [ 33.751913] ? selinux_tun_dev_create+0xc0/0xc0 [ 33.756726] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 33.762409] ? __fdget+0x18/0x20 [ 33.765749] __sys_sendmsg+0xe5/0x210 [ 33.769516] ? __sys_sendmsg+0xe5/0x210 [ 33.773468] ? SyS_shutdown+0x290/0x290 [ 33.777421] ? SyS_futex+0x285/0x380 [ 33.781112] ? SyS_futex+0x28e/0x380 [ 33.784879] ? SyS_setsockopt+0x215/0x360 [ 33.789006] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.794005] SyS_sendmsg+0x2d/0x50 [ 33.797518] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 33.802255] RIP: 0033:0x4512e9 [ 33.805412] RSP: 002b:00007f86c6b5ec08 EFLAGS: 00000216 ORIG_RAX: 000000000000002e [ 33.813095] RAX: ffffffffffffffda RBX: 0000000000718000 RCX: 00000000004512e9 [ 33.820334] RDX: 0000000000000000 RSI: 000000002023dfc8 RDI: 0000000000000008 [ 33.827572] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 33.834814] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000 [ 33.842057] R13: 00007ffd2696fc9f R14: 00007f86c6b5f9c0 R15: 0000000000000000