INFO: task syz-executor.4:9361 can't die for more than 143 seconds. syz-executor.4 R running task 19960 9361 7314 0x00004006 Call Trace: context_switch kernel/sched/core.c:3430 [inline] __schedule+0x8f3/0x1f80 kernel/sched/core.c:4155 preempt_schedule_irq+0xb0/0x150 kernel/sched/core.c:4413 idtentry_exit_cond_resched arch/x86/entry/common.c:600 [inline] idtentry_exit_cond_rcu+0xc0/0xf0 arch/x86/entry/common.c:647 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:576 RIP: 0010:rep_nop arch/x86/include/asm/vdso/processor.h:13 [inline] RIP: 0010:cpu_relax arch/x86/include/asm/vdso/processor.h:18 [inline] RIP: 0010:__read_seqcount_begin include/linux/seqlock.h:131 [inline] RIP: 0010:raw_read_seqcount_begin include/linux/seqlock.h:166 [inline] RIP: 0010:read_seqcount_begin include/linux/seqlock.h:183 [inline] RIP: 0010:xfrm_state_find+0x1a3e/0x4f80 net/xfrm/xfrm_state.c:1061 Code: Bad RIP value. RSP: 86ce15a3:ffffc900028e6f30 EFLAGS: 00000018 ORIG_RAX: 0000000000000010 RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90012867000 RDX: 0000000000040000 RSI: ffffffff86ce15a3 RDI: 0000000000000001 RBP: ffffc900028e7100 R08: ffff8880926a65c0 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000003d R14: 000000000000000a R15: 0000000000000000 xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2396 [inline] xfrm_tmpl_resolve+0x2eb/0xd10 net/xfrm/xfrm_policy.c:2441 xfrm_resolve_and_create_bundle+0x123/0x2480 net/xfrm/xfrm_policy.c:2731 xfrm_lookup_with_ifid+0x231/0x2060 net/xfrm/xfrm_policy.c:3054 xfrm_lookup net/xfrm/xfrm_policy.c:3178 [inline] xfrm_lookup_route+0x36/0x1e0 net/xfrm/xfrm_policy.c:3189 ip6_dst_lookup_flow+0x159/0x1d0 net/ipv6/ip6_output.c:1160 rawv6_sendmsg+0xca8/0x3940 net/ipv6/raw.c:928 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:814 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x32f/0x810 net/socket.c:2352 ___sys_sendmsg+0x100/0x170 net/socket.c:2406 __sys_sendmmsg+0x195/0x480 net/socket.c:2496 __do_sys_sendmmsg net/socket.c:2525 [inline] __se_sys_sendmmsg net/socket.c:2522 [inline] __x64_sys_sendmmsg+0x99/0x100 net/socket.c:2522 do_syscall_64+0x60/0xe0 arch/x86/entry/common.c:359 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45ca69 Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f9ff5427c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00000000004fcbe0 RCX: 000000000045ca69 RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000006 RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000008ee R14: 00000000004cbbdf R15: 00007f9ff54286d4 INFO: task syz-executor.3:9366 can't die for more than 145 seconds. syz-executor.3 R running task 19976 9366 7236 0x00004006 Call Trace: context_switch kernel/sched/core.c:3430 [inline] __schedule+0x8f3/0x1f80 kernel/sched/core.c:4155 INFO: task syz-executor.0:9367 can't die for more than 147 seconds. syz-executor.0 R running task 19976 9367 6926 0x00004006 Call Trace: context_switch kernel/sched/core.c:3430 [inline] __schedule+0x8f3/0x1f80 kernel/sched/core.c:4155 INFO: task syz-executor.2:9371 can't die for more than 149 seconds. syz-executor.2 R running task 19960 9371 7197 0x00004006 Call Trace: context_switch kernel/sched/core.c:3430 [inline] __schedule+0x8f3/0x1f80 kernel/sched/core.c:4155 preempt_schedule_irq+0xb0/0x150 kernel/sched/core.c:4413 INFO: task syz-executor.1:9377 can't die for more than 150 seconds. syz-executor.1 R running task 19976 9377 7056 0x00004006 Call Trace: context_switch kernel/sched/core.c:3430 [inline] __schedule+0x8f3/0x1f80 kernel/sched/core.c:4155 preempt_schedule_irq+0xb0/0x150 kernel/sched/core.c:4413 idtentry_exit_cond_resched arch/x86/entry/common.c:600 [inline] idtentry_exit_cond_rcu+0xc0/0xf0 arch/x86/entry/common.c:647 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:576 RIP: 0010:__read_seqcount_begin include/linux/seqlock.h:129 [inline] RIP: 0010:raw_read_seqcount_begin include/linux/seqlock.h:166 [inline] RIP: 0010:read_seqcount_begin include/linux/seqlock.h:183 [inline] RIP: 0010:xfrm_state_find+0x1a45/0x4f80 net/xfrm/xfrm_state.c:1061 Code: d8 fe ff ff 48 8d 8d 50 ff ff ff 4c 8d 8d 30 ff ff ff 4c 8d 85 20 ff ff ff e8 57 d1 fe ff e9 85 fb ff ff e8 fd e5 a4 fa f3 90 <44> 8b 2d 34 3d e1 03 31 ff 44 89 eb 83 e3 01 89 de e8 45 e7 a4 fa RSP: 0018:ffffc90002926f30 EFLAGS: 00000246 RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000418b000 RDX: 0000000000040000 RSI: ffffffff86ce15a3 RDI: 0000000000000001 RBP: ffffc90002927100 R08: ffff8880886e8180 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000003d R14: 000000000000000a R15: 0000000000000000 xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2396 [inline] xfrm_tmpl_resolve+0x2eb/0xd10 net/xfrm/xfrm_policy.c:2441 xfrm_resolve_and_create_bundle+0x123/0x2480 net/xfrm/xfrm_policy.c:2731 xfrm_lookup_with_ifid+0x231/0x2060 net/xfrm/xfrm_policy.c:3054 xfrm_lookup net/xfrm/xfrm_policy.c:3178 [inline] xfrm_lookup_route+0x36/0x1e0 net/xfrm/xfrm_policy.c:3189 ip6_dst_lookup_flow+0x159/0x1d0 net/ipv6/ip6_output.c:1160 rawv6_sendmsg+0xca8/0x3940 net/ipv6/raw.c:928 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:814 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x32f/0x810 net/socket.c:2352 ___sys_sendmsg+0x100/0x170 net/socket.c:2406 __sys_sendmmsg+0x195/0x480 net/socket.c:2496 __do_sys_sendmmsg net/socket.c:2525 [inline] __se_sys_sendmmsg net/socket.c:2522 [inline] __x64_sys_sendmmsg+0x99/0x100 net/socket.c:2522 do_syscall_64+0x60/0xe0 arch/x86/entry/common.c:359 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45ca69 Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fab6e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00000000004fcbe0 RCX: 000000000045ca69 RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000006 RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000008ee R14: 00000000004cbbdf R15: 00007fab6e37e6d4 INFO: task syz-executor.5:9378 can't die for more than 153 seconds. syz-executor.5 R running task 19960 9378 7422 0x00004006 Call Trace: context_switch kernel/sched/core.c:3430 [inline] __schedule+0x8f3/0x1f80 kernel/sched/core.c:4155 preempt_schedule_irq+0xb0/0x150 kernel/sched/core.c:4413 idtentry_exit_cond_resched arch/x86/entry/common.c:600 [inline] idtentry_exit_cond_rcu+0xc0/0xf0 arch/x86/entry/common.c:647 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:576 RIP: 0010:__read_seqcount_begin include/linux/seqlock.h:129 [inline] RIP: 0010:raw_read_seqcount_begin include/linux/seqlock.h:166 [inline] RIP: 0010:read_seqcount_begin include/linux/seqlock.h:183 [inline] RIP: 0010:xfrm_state_find+0x1a45/0x4f80 net/xfrm/xfrm_state.c:1061 Code: d8 fe ff ff 48 8d 8d 50 ff ff ff 4c 8d 8d 30 ff ff ff 4c 8d 85 20 ff ff ff e8 57 d1 fe ff e9 85 fb ff ff e8 fd e5 a4 fa f3 90 <44> 8b 2d 34 3d e1 03 31 ff 44 89 eb 83 e3 01 89 de e8 45 e7 a4 fa