program: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) [ 94.801583][ T4645] Bluetooth: hci0: command tx timeout [ 94.929195][ T5318] lo speed is unknown, defaulting to 1000 [ 94.933350][ T5318] lo speed is unknown, defaulting to 1000 [ 94.937072][ T5318] lo speed is unknown, defaulting to 1000 [ 95.089054][ T5318] infiniband sz1: set active [ 95.091915][ T5318] infiniband sz1: added lo [ 95.100047][ T5315] lo speed is unknown, defaulting to 1000 [ 95.127245][ T5318] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 95.134785][ T5318] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 95.142649][ T5318] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 95.167555][ T5318] RDS/IB: sz1: added [ 95.175620][ T5318] smc: adding ib device sz1 with port count 1 [ 95.179610][ T5318] smc: ib device sz1 port 1 has no pnetid [ 95.184832][ T5315] lo speed is unknown, defaulting to 1000 [ 95.191095][ T5318] lo speed is unknown, defaulting to 1000 [ 95.299476][ T5298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.428355][ T5298] usb 5-1: device descriptor read/64, error -71 [ 95.668732][ T5298] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.798445][ T5298] usb 5-1: device descriptor read/64, error -71 [ 95.913122][ T5298] usb usb5-port1: attempt power cycle [ 96.258733][ T5298] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.280020][ T5298] usb 5-1: device descriptor read/8, error -71 [ 96.518506][ T5298] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.539414][ T5298] usb 5-1: device descriptor read/8, error -71 [ 96.648857][ T5298] usb usb5-port1: unable to enumerate USB device [ 96.870466][ T4645] Bluetooth: hci0: command tx timeout [ 98.013432][ T5318] smc: removing ib device sz1 [ 98.033005][ T5318] smbdirect: ib_dev[sz1] removed [ 98.300568][ T5318] ------------[ cut here ]------------ [ 98.302879][ T5318] !xa_empty(&pool->xa) [ 98.302893][ T5318] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x48/0x60, CPU#0: syz.0.0/5318 [ 98.309644][ T5318] Modules linked in: [ 98.311485][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 98.315351][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.319666][ T5318] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 98.322301][ T5318] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 20 65 4c f9 48 83 3b 00 75 0c e8 15 fd dc f8 5b c3 cc cc cc cc cc e8 09 fd dc f8 90 <0f> 0b 90 5b e9 4f 51 f0 02 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 98.330628][ T5318] RSP: 0018:ffffc9000dc97040 EFLAGS: 00010246 [ 98.333289][ T5318] RAX: ffffffff88ea18c7 RBX: ffff888036b0d418 RCX: 0000000000100000 [ 98.336773][ T5318] RDX: ffffc9000eb6a000 RSI: 00000000000fffff RDI: 0000000000100000 [ 98.340604][ T5318] RBP: ffff888036b0d0f8 R08: ffff888036b0c7ab R09: 1ffff11006d618f5 [ 98.344203][ T5318] R10: dffffc0000000000 R11: ffffffff88e848b0 R12: ffff888036b0d0f8 [ 98.347564][ T5318] R13: 1ffff11006d619ef R14: ffffffff88e848b0 R15: dffffc0000000000 [ 98.351344][ T5318] FS: 00007fd707fa06c0(0000) GS:ffff88808c526000(0000) knlGS:0000000000000000 [ 98.355114][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.357953][ T5318] CR2: 00007fd51016c708 CR3: 0000000042fb8000 CR4: 0000000000352ef0 [ 98.361496][ T5318] Call Trace: [ 98.363047][ T5318] [ 98.364352][ T5318] rxe_dealloc+0x27/0xc0 [ 98.366263][ T5318] ? __pfx_rxe_dealloc+0x10/0x10 [ 98.368714][ T5318] ib_dealloc_device+0x54/0x200 [ 98.371771][ T5318] __ib_unregister_device+0x38f/0x400 [ 98.374127][ T5318] ib_unregister_device_and_put+0xb8/0xf0 [ 98.376510][ T5318] nldev_dellink+0x39e/0x430 [ 98.378746][ T5318] ? __pfx_nldev_dellink+0x10/0x10 [ 98.380962][ T5318] ? apparmor_capable+0x126/0x170 [ 98.383253][ T5318] ? bpf_lsm_capable+0x9/0x20 [ 98.385465][ T5318] ? security_capable+0x7e/0x2c0 [ 98.387687][ T5318] ? __pfx_nldev_dellink+0x10/0x10 [ 98.390025][ T5318] rdma_nl_rcv+0x6ef/0xa40 [ 98.391991][ T5318] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 98.394100][ T5318] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.396364][ T5318] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.398886][ T5318] netlink_unicast+0x7bd/0x940 [ 98.401232][ T5318] netlink_sendmsg+0x813/0xb40 [ 98.403324][ T5318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.405558][ T5318] ? aa_sock_msg_perm+0xf6/0x1c0 [ 98.407659][ T5318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.409986][ T5318] sock_sendmsg_nosec+0x13a/0x180 [ 98.412228][ T5318] ____sys_sendmsg+0x54e/0x850 [ 98.414380][ T5318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.416731][ T5318] ? import_iovec+0x73/0xa0 [ 98.418903][ T5318] ___sys_sendmsg+0x2a5/0x360 [ 98.421027][ T5318] ? __lock_acquire+0x683/0x2cf0 [ 98.423153][ T5318] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.425473][ T5318] ? futex_wait+0x2a2/0x390 [ 98.427522][ T5318] ? __fget_files+0x2a/0x420 [ 98.429659][ T5318] ? __fget_files+0x3a2/0x420 [ 98.431780][ T5318] __x64_sys_sendmsg+0x1b1/0x290 [ 98.434146][ T5318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.436667][ T5318] do_syscall_64+0x166/0x520 [ 98.438772][ T5318] ? trace_irq_disable+0x3b/0x140 [ 98.440872][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.443506][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 98.445528][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.448098][ T5318] RIP: 0033:0x7fd70719e0d9 [ 98.450320][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.459070][ T5318] RSP: 002b:00007fd707f9ffe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.462556][ T5318] RAX: ffffffffffffffda RBX: 00007fd707425fa0 RCX: 00007fd70719e0d9 [ 98.466024][ T5318] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 98.470429][ T5318] RBP: 00007fd707235024 R08: 0000000000000000 R09: 0000000000000000 [ 98.474676][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.478183][ T5318] R13: 00007fd707426038 R14: 00007fd707425fa0 R15: 00007fffba079078 [ 98.481732][ T5318] [ 98.483124][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.486285][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 98.490531][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.494799][ T5318] Call Trace: [ 98.496231][ T5318] [ 98.497507][ T5318] vpanic+0x56d/0xa60 [ 98.499696][ T5318] ? __pfx__printk+0x10/0x10 [ 98.501972][ T5318] ? __pfx_vpanic+0x10/0x10 [ 98.504385][ T5318] ? is_bpf_text_address+0x292/0x2b0 [ 98.507132][ T5318] ? is_bpf_text_address+0x26/0x2b0 [ 98.509570][ T5318] panic+0xc5/0xd0 [ 98.511323][ T5318] ? __pfx_panic+0x10/0x10 [ 98.513300][ T5318] __warn+0x315/0x4c0 [ 98.515077][ T5318] ? rxe_pool_cleanup+0x48/0x60 [ 98.517039][ T5318] ? rxe_pool_cleanup+0x48/0x60 [ 98.519143][ T5318] __report_bug+0x276/0x570 [ 98.521022][ T5318] ? rxe_pool_cleanup+0x48/0x60 [ 98.523090][ T5318] ? __pfx___report_bug+0x10/0x10 [ 98.525298][ T5318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.527948][ T5318] ? flush_workqueue_prep_pwqs+0x47f/0x4f0 [ 98.530721][ T5318] ? rxe_pool_cleanup+0x48/0x60 [ 98.532901][ T5318] report_bug+0x16b/0x220 [ 98.534979][ T5318] ? rxe_pool_cleanup+0x48/0x60 [ 98.537270][ T5318] ? rxe_pool_cleanup+0x4a/0x60 [ 98.539371][ T5318] handle_bug+0x9c/0x200 [ 98.541115][ T5318] exc_invalid_op+0x1a/0x50 [ 98.543156][ T5318] asm_exc_invalid_op+0x1a/0x20 [ 98.545234][ T5318] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 98.547602][ T5318] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 20 65 4c f9 48 83 3b 00 75 0c e8 15 fd dc f8 5b c3 cc cc cc cc cc e8 09 fd dc f8 90 <0f> 0b 90 5b e9 4f 51 f0 02 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 98.556165][ T5318] RSP: 0018:ffffc9000dc97040 EFLAGS: 00010246 [ 98.558863][ T5318] RAX: ffffffff88ea18c7 RBX: ffff888036b0d418 RCX: 0000000000100000 [ 98.562117][ T5318] RDX: ffffc9000eb6a000 RSI: 00000000000fffff RDI: 0000000000100000 [ 98.565508][ T5318] RBP: ffff888036b0d0f8 R08: ffff888036b0c7ab R09: 1ffff11006d618f5 [ 98.568993][ T5318] R10: dffffc0000000000 R11: ffffffff88e848b0 R12: ffff888036b0d0f8 [ 98.572514][ T5318] R13: 1ffff11006d619ef R14: ffffffff88e848b0 R15: dffffc0000000000 [ 98.575747][ T5318] ? __pfx_rxe_dealloc+0x10/0x10 [ 98.577736][ T5318] ? __pfx_rxe_dealloc+0x10/0x10 [ 98.579827][ T5318] ? rxe_pool_cleanup+0x47/0x60 [ 98.581990][ T5318] rxe_dealloc+0x27/0xc0 [ 98.583880][ T5318] ? __pfx_rxe_dealloc+0x10/0x10 [ 98.586022][ T5318] ib_dealloc_device+0x54/0x200 [ 98.588246][ T5318] __ib_unregister_device+0x38f/0x400 [ 98.590660][ T5318] ib_unregister_device_and_put+0xb8/0xf0 [ 98.593191][ T5318] nldev_dellink+0x39e/0x430 [ 98.595432][ T5318] ? __pfx_nldev_dellink+0x10/0x10 [ 98.597844][ T5318] ? apparmor_capable+0x126/0x170 [ 98.600376][ T5318] ? bpf_lsm_capable+0x9/0x20 [ 98.602500][ T5318] ? security_capable+0x7e/0x2c0 [ 98.604709][ T5318] ? __pfx_nldev_dellink+0x10/0x10 [ 98.606932][ T5318] rdma_nl_rcv+0x6ef/0xa40 [ 98.608926][ T5318] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 98.611167][ T5318] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.613539][ T5318] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.616228][ T5318] netlink_unicast+0x7bd/0x940 [ 98.618472][ T5318] netlink_sendmsg+0x813/0xb40 [ 98.620687][ T5318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.623090][ T5318] ? aa_sock_msg_perm+0xf6/0x1c0 [ 98.625210][ T5318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.627612][ T5318] sock_sendmsg_nosec+0x13a/0x180 [ 98.629970][ T5318] ____sys_sendmsg+0x54e/0x850 [ 98.632053][ T5318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.634735][ T5318] ? import_iovec+0x73/0xa0 [ 98.636692][ T5318] ___sys_sendmsg+0x2a5/0x360 [ 98.638890][ T5318] ? __lock_acquire+0x683/0x2cf0 [ 98.641289][ T5318] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.643770][ T5318] ? futex_wait+0x2a2/0x390 [ 98.646248][ T5318] ? __fget_files+0x2a/0x420 [ 98.648864][ T5318] ? __fget_files+0x3a2/0x420 [ 98.651358][ T5318] __x64_sys_sendmsg+0x1b1/0x290 [ 98.653508][ T5318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.655865][ T5318] do_syscall_64+0x166/0x520 [ 98.657843][ T5318] ? trace_irq_disable+0x3b/0x140 [ 98.660753][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.663529][ T5318] ? clear_bhb_loop+0x70/0xc0 [ 98.665469][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.668048][ T5318] RIP: 0033:0x7fd70719e0d9 [ 98.670471][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.679446][ T5318] RSP: 002b:00007fd707f9ffe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.682924][ T5318] RAX: ffffffffffffffda RBX: 00007fd707425fa0 RCX: 00007fd70719e0d9 [ 98.686328][ T5318] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 98.689979][ T5318] RBP: 00007fd707235024 R08: 0000000000000000 R09: 0000000000000000 [ 98.693401][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.696763][ T5318] R13: 00007fd707426038 R14: 00007fd707425fa0 R15: 00007fffba079078 [ 98.700279][ T5318] [ 98.702104][ T5318] Kernel Offset: disabled [ 98.704077][ T5318] Rebooting in 86400 seconds..