INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-net-kasan-gce-5,10.128.0.42' (ECDSA) to the list of known hosts. 2017/08/11 23:48:00 parsed 1 programs 2017/08/11 23:48:00 executed programs: 0 syzkaller login: [ 43.956423] BUG: sleeping function called from invalid context at mm/slab.h:416 [ 43.957606] in_atomic(): 1, irqs_disabled(): 0, pid: 2981, name: syz-executor0 [ 43.958911] 3 locks held by syz-executor0/2981: [ 43.959746] #0: (&net->xfrm.xfrm_cfg_mutex){+.+.+.}, at: [] pfkey_sendmsg+0x4c8/0x9f0 [ 43.961115] #1: (&pfk->dump_lock){+.+.+.}, at: [] pfkey_do_dump+0x76/0x3f0 [ 43.962348] #2: (&(&net->xfrm.xfrm_policy_lock)->rlock){+...+.}, at: [] xfrm_policy_walk+0x192/0xa30 [ 43.964041] CPU: 0 PID: 2981 Comm: syz-executor0 Not tainted 4.13.0-rc4+ #1 [ 43.965193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.966591] Call Trace: [ 43.966985] dump_stack+0x194/0x257 [ 43.967511] ? arch_local_irq_restore+0x53/0x53 [ 43.968421] ? print_lock+0x9f/0xa2 [ 43.969048] ? lockdep_print_held_locks+0xc4/0x130 [ 43.969708] ___might_sleep+0x2b2/0x470 [ 43.970277] ? check_same_owner+0x320/0x320 [ 43.970926] ? mark_held_locks+0xaf/0x100 [ 43.971582] __might_sleep+0x95/0x190 [ 43.972178] kmem_cache_alloc+0x24b/0x6e0 [ 43.972903] ? sock_def_readable+0x26f/0x5e0 [ 43.973642] skb_clone+0x1ae/0x480 [ 43.974144] ? skb_split+0x1310/0x1310 [ 43.974663] ? refcount_sub_and_test+0x115/0x1b0 [ 43.975399] ? refcount_inc_not_zero+0xfe/0x180 [ 43.976246] ? refcount_add+0x60/0x60 [ 43.978263] ? find_held_lock+0x35/0x1d0 [ 43.982301] pfkey_broadcast_one+0x4b2/0x6f0 [ 43.986677] ? pfkey_terminate_dump+0x180/0x180 [ 43.991316] ? __lock_is_held+0xb6/0x140 [ 43.995352] pfkey_broadcast+0x4ba/0x770 [ 43.999381] ? pfkey_acquire+0x220/0x220 [ 44.003408] ? memset+0x31/0x40 [ 44.006655] ? pfkey_xfrm_policy2msg+0x183d/0x22b0 [ 44.011556] ? pfkey_sockaddr_fill+0x340/0x340 [ 44.016101] ? check_noncircular+0x20/0x20 [ 44.020300] ? pfkey_xfrm_policy2msg_size+0x1d3/0x230 [ 44.025458] dump_sp+0x3d6/0x500 [ 44.028792] ? pfkey_flush+0x3c0/0x3c0 [ 44.032645] ? xfrm_policy_walk+0x192/0xa30 [ 44.036959] xfrm_policy_walk+0x2f1/0xa30 [ 44.041074] ? pfkey_flush+0x3c0/0x3c0 [ 44.044929] ? xfrm_audit_policy_delete+0x1f0/0x1f0 [ 44.049912] ? __kfree_skb+0x20/0x20 [ 44.053593] ? pfkey_terminate_dump+0x180/0x180 [ 44.058228] ? __lock_is_held+0xb6/0x140 [ 44.062275] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 44.067086] ? wait_for_completion+0x730/0x730 [ 44.071640] ? pfkey_acquire+0x220/0x220 [ 44.075669] ? pfkey_broadcast_one+0x6f0/0x6f0 [ 44.080225] pfkey_dump_sp+0x42/0x50 [ 44.083906] pfkey_do_dump+0xaa/0x3f0 [ 44.087682] ? xfrm_policy_walk_init+0x69/0x1c0 [ 44.092316] ? dump_sa+0x5d0/0x5d0 [ 44.095825] ? iov_iter_advance+0x2a1/0x13f0 [ 44.100206] pfkey_spddump+0x1a0/0x210 [ 44.104076] ? pfkey_recvmsg+0x710/0x710 [ 44.108118] pfkey_process+0x606/0x710 [ 44.111984] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 44.116965] ? kasan_check_write+0x14/0x20 [ 44.121194] ? dup_iter+0x260/0x260 [ 44.124798] pfkey_sendmsg+0x4d6/0x9f0 [ 44.128654] ? pfkey_spdget+0xb00/0xb00 [ 44.132596] ? selinux_socket_sendmsg+0x36/0x40 [ 44.137239] ? security_socket_sendmsg+0x89/0xb0 [ 44.141964] ? pfkey_spdget+0xb00/0xb00 [ 44.145906] sock_sendmsg+0xca/0x110 [ 44.149593] ___sys_sendmsg+0x755/0x890 [ 44.153551] ? copy_msghdr_from_user+0x590/0x590 [ 44.158295] ? fget_raw+0x20/0x20 [ 44.161753] ? sock_has_perm+0x29c/0x400 [ 44.165779] ? __fget_light+0x297/0x380 [ 44.169724] ? selinux_tun_dev_create+0xc0/0xc0 [ 44.174358] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 44.180050] ? __fdget+0x18/0x20 [ 44.183388] __sys_sendmsg+0xe5/0x210 [ 44.187172] ? __sys_sendmsg+0xe5/0x210 [ 44.191115] ? SyS_shutdown+0x290/0x290 [ 44.195062] ? SyS_futex+0x285/0x380 [ 44.198737] ? SyS_futex+0x28e/0x380 [ 44.202414] ? SyS_setsockopt+0x215/0x360 [ 44.206566] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 44.211568] SyS_sendmsg+0x2d/0x50 [ 44.215090] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 44.219807] RIP: 0033:0x4512e9 [ 44.222961] RSP: 002b:00007f4b64579c08 EFLAGS: 00000216 ORIG_RAX: 000000000000002e [ 44.230631] RAX: ffffffffffffffda RBX: 0000000000718000 RCX: 00000000004512e9 [ 44.237865] RDX: 0000000000000000 RSI: 000000002023dfc8 RDI: 0000000000000008 [ 44.245114] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 44.252347] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000 [ 44.259580] R13: 00007ffc845cf1ef R14: 00007f4b6457a9c0 R15: 0000000000000000