program:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b)
write(r2, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd70000705df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000)
unshare(0x62040200)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1}}]}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rtc_irq_set_state\x00', r3, 0x0, 0xd}, 0x18)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_PIE_ON(r4, 0x7005)
sendfile(r1, r4, &(0x7f00000000c0)=0x9, 0x9)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x40, &(0x7f0000000280)={&(0x7f0000000000)={0x20, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
[ 85.898724][ T5322] syz.0.0 (5322): drop_caches: 1
[ 85.920890][ T5322] syz.0.0 (5322): drop_caches: 1
[ 85.930099][ T5299] Bluetooth: hci0: command tx timeout
[ 86.016935][ T5322] syz.0.0 (5322): drop_caches: 1
[ 86.169206][ T5322] infiniband syz1: set active
[ 86.172036][ T5322] infiniband syz1: added syz_tun
[ 86.235835][ T5322] RDS/IB: syz1: added
[ 86.238265][ T5322] smc: adding ib device syz1 with port count 1
[ 86.241572][ T5322] smc: ib device syz1 port 1 has no pnetid
[ 86.758681][ T5307] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[ 86.912340][ T5307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 86.917342][ T5307] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 86.921986][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 86.939089][ T5307] usb 5-1: config 0 descriptor??
[ 86.957619][ T5307] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 87.159883][ T5322] smc: removing ib device syz1
[ 87.563123][ T5322] ------------[ cut here ]------------
[ 87.566031][ T5322] !xa_empty(&pool->xa)
[ 87.566048][ T5322] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x48/0x60, CPU#0: syz.0.0/5322
[ 87.574136][ T5322] Modules linked in:
[ 87.576446][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.581563][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.586087][ T5322] RIP: 0010:rxe_pool_cleanup+0x48/0x60
[ 87.588681][ T5322] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 c5 6b f9 48 83 3b 00 75 0c e8 15 e5 ff f8 5b e9 ff ce ee 02 cc e8 09 e5 ff f8 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00
[ 87.598030][ T5322] RSP: 0018:ffffc9000dfe7038 EFLAGS: 00010246
[ 87.600895][ T5322] RAX: ffffffff88c5e9a7 RBX: ffff88801f9d1438 RCX: 0000000000100000
[ 87.604755][ T5322] RDX: ffffc9000ec3a000 RSI: 00000000000fffff RDI: 0000000000100000
[ 87.608528][ T5322] RBP: ffff88801f9d1118 R08: ffff88801f9d07cb R09: 1ffff11003f3a0f9
[ 87.614238][ T5322] R10: dffffc0000000000 R11: ffffffff88c42380 R12: ffff88801f9d0000
[ 87.618276][ T5322] R13: dffffc0000000000 R14: ffffffff88c42380 R15: dffffc0000000000
[ 87.621918][ T5322] FS: 00007f92ae4c36c0(0000) GS:ffff88808ca49000(0000) knlGS:0000000000000000
[ 87.625902][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.628858][ T5322] CR2: 00007f92ad7ec2e0 CR3: 0000000036422000 CR4: 0000000000352ef0
[ 87.632726][ T5322] Call Trace:
[ 87.634688][ T5322]
[ 87.636403][ T5322] rxe_dealloc+0x27/0xc0
[ 87.638695][ T5322] ? __pfx_rxe_dealloc+0x10/0x10
[ 87.641419][ T5322] ib_dealloc_device+0x54/0x200
[ 87.643691][ T5322] __ib_unregister_device+0x393/0x3f0
[ 87.646206][ T5322] ? __pfx_ib_device_get_by_index+0x10/0x10
[ 87.649259][ T5322] ib_unregister_device_and_put+0xb8/0xf0
[ 87.652206][ T5322] nldev_dellink+0x288/0x320
[ 87.654743][ T5322] ? __lock_acquire+0x6b5/0x2cf0
[ 87.657253][ T5322] ? __pfx_nldev_dellink+0x10/0x10
[ 87.659856][ T5322] ? apparmor_capable+0x126/0x170
[ 87.662109][ T5322] ? bpf_lsm_capable+0x9/0x20
[ 87.664647][ T5322] ? security_capable+0x7e/0x2c0
[ 87.667441][ T5322] ? __pfx_nldev_dellink+0x10/0x10
[ 87.670114][ T5322] rdma_nl_rcv+0x6d7/0xa10
[ 87.672104][ T5322] ? __pfx_rdma_nl_rcv+0x10/0x10
[ 87.674318][ T5322] ? __netlink_lookup+0x7e4/0x8b0
[ 87.676443][ T5322] ? netlink_deliver_tap+0x2e/0x1b0
[ 87.678751][ T5322] netlink_unicast+0x80f/0x9b0
[ 87.681276][ T5322] ? __pfx_netlink_unicast+0x10/0x10
[ 87.684339][ T5322] ? netlink_sendmsg+0x650/0xb40
[ 87.687019][ T5322] ? skb_put+0x11b/0x210
[ 87.689485][ T5322] netlink_sendmsg+0x813/0xb40
[ 87.691910][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10
[ 87.694499][ T5322] ? aa_sock_msg_perm+0xf1/0x1b0
[ 87.697002][ T5322] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 87.699654][ T5322] ____sys_sendmsg+0x972/0x9f0
[ 87.701830][ T5322] ? futex_unqueue+0x211/0x240
[ 87.704098][ T5322] ? __pfx_____sys_sendmsg+0x10/0x10
[ 87.706838][ T5322] ? import_iovec+0x73/0xa0
[ 87.709641][ T5322] ___sys_sendmsg+0x2a5/0x360
[ 87.712446][ T5322] ? __pfx____sys_sendmsg+0x10/0x10
[ 87.715246][ T5322] ? futex_wait+0x29a/0x380
[ 87.717673][ T5322] ? __fget_files+0x2a/0x420
[ 87.719858][ T5322] ? __fget_files+0x3a0/0x420
[ 87.722053][ T5322] __x64_sys_sendmsg+0x1bd/0x2a0
[ 87.724743][ T5322] ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 87.727840][ T5322] ? rcu_is_watching+0x15/0xb0
[ 87.730382][ T5322] do_syscall_64+0x14d/0xf80
[ 87.732605][ T5322] ? trace_irq_disable+0x3b/0x150
[ 87.735018][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.738080][ T5322] ? clear_bhb_loop+0x40/0x90
[ 87.741360][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.745125][ T5322] RIP: 0033:0x7f92ad59c819
[ 87.747730][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.759714][ T5322] RSP: 002b:00007f92ae4c2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 87.764955][ T5322] RAX: ffffffffffffffda RBX: 00007f92ad815fa0 RCX: 00007f92ad59c819
[ 87.769038][ T5322] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008
[ 87.773032][ T5322] RBP: 00007f92ad632c91 R08: 0000000000000000 R09: 0000000000000000
[ 87.776540][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.780516][ T5322] R13: 00007f92ad816038 R14: 00007f92ad815fa0 R15: 00007fff8506f788
[ 87.785087][ T5322]
[ 87.786589][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.790325][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.794344][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.799210][ T5322] Call Trace:
[ 87.801544][ T5322]
[ 87.803542][ T5322] vpanic+0x56c/0xa60
[ 87.805575][ T5322] ? __pfx__printk+0x10/0x10
[ 87.807683][ T5322] ? __pfx_vpanic+0x10/0x10
[ 87.809715][ T5322] ? is_bpf_text_address+0x292/0x2b0
[ 87.811979][ T5322] ? is_bpf_text_address+0x26/0x2b0
[ 87.814289][ T5322] panic+0xc5/0xd0
[ 87.816087][ T5322] ? __pfx_panic+0x10/0x10
[ 87.818333][ T5322] __warn+0x315/0x4f0
[ 87.820628][ T5322] ? rxe_pool_cleanup+0x48/0x60
[ 87.822964][ T5322] ? rxe_pool_cleanup+0x48/0x60
[ 87.825374][ T5322] __report_bug+0x29a/0x540
[ 87.827516][ T5322] ? rxe_pool_cleanup+0x48/0x60
[ 87.830085][ T5322] ? __pfx___report_bug+0x10/0x10
[ 87.833798][ T5322] ? flush_workqueue_prep_pwqs+0x475/0x4f0
[ 87.837118][ T5322] ? __flush_workqueue+0x12d3/0x14f0
[ 87.839663][ T5322] ? rxe_pool_cleanup+0x48/0x60
[ 87.841983][ T5322] report_bug+0x16a/0x220
[ 87.843952][ T5322] ? rxe_pool_cleanup+0x48/0x60
[ 87.846063][ T5322] ? rxe_pool_cleanup+0x4a/0x60
[ 87.848499][ T5322] handle_bug+0x9c/0x200
[ 87.850469][ T5322] exc_invalid_op+0x1a/0x50
[ 87.852668][ T5322] asm_exc_invalid_op+0x1a/0x20
[ 87.854844][ T5322] RIP: 0010:rxe_pool_cleanup+0x48/0x60
[ 87.857556][ T5322] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 c5 6b f9 48 83 3b 00 75 0c e8 15 e5 ff f8 5b e9 ff ce ee 02 cc e8 09 e5 ff f8 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00
[ 87.866524][ T5322] RSP: 0018:ffffc9000dfe7038 EFLAGS: 00010246
[ 87.869337][ T5322] RAX: ffffffff88c5e9a7 RBX: ffff88801f9d1438 RCX: 0000000000100000
[ 87.873058][ T5322] RDX: ffffc9000ec3a000 RSI: 00000000000fffff RDI: 0000000000100000
[ 87.876677][ T5322] RBP: ffff88801f9d1118 R08: ffff88801f9d07cb R09: 1ffff11003f3a0f9
[ 87.880335][ T5322] R10: dffffc0000000000 R11: ffffffff88c42380 R12: ffff88801f9d0000
[ 87.883841][ T5322] R13: dffffc0000000000 R14: ffffffff88c42380 R15: dffffc0000000000
[ 87.887805][ T5322] ? __pfx_rxe_dealloc+0x10/0x10
[ 87.890396][ T5322] ? __pfx_rxe_dealloc+0x10/0x10
[ 87.892520][ T5322] ? rxe_pool_cleanup+0x47/0x60
[ 87.894661][ T5322] ? rxe_pool_cleanup+0x47/0x60
[ 87.896883][ T5322] rxe_dealloc+0x27/0xc0
[ 87.898936][ T5322] ? __pfx_rxe_dealloc+0x10/0x10
[ 87.901408][ T5322] ib_dealloc_device+0x54/0x200
[ 87.903565][ T5322] __ib_unregister_device+0x393/0x3f0
[ 87.905854][ T5322] ? __pfx_ib_device_get_by_index+0x10/0x10
[ 87.908452][ T5322] ib_unregister_device_and_put+0xb8/0xf0
[ 87.911352][ T5322] nldev_dellink+0x288/0x320
[ 87.913778][ T5322] ? __lock_acquire+0x6b5/0x2cf0
[ 87.916111][ T5322] ? __pfx_nldev_dellink+0x10/0x10
[ 87.918313][ T5322] ? apparmor_capable+0x126/0x170
[ 87.920563][ T5322] ? bpf_lsm_capable+0x9/0x20
[ 87.922638][ T5322] ? security_capable+0x7e/0x2c0
[ 87.925096][ T5322] ? __pfx_nldev_dellink+0x10/0x10
[ 87.927751][ T5322] rdma_nl_rcv+0x6d7/0xa10
[ 87.930339][ T5322] ? __pfx_rdma_nl_rcv+0x10/0x10
[ 87.932895][ T5322] ? __netlink_lookup+0x7e4/0x8b0
[ 87.934835][ T5322] ? netlink_deliver_tap+0x2e/0x1b0
[ 87.937655][ T5322] netlink_unicast+0x80f/0x9b0
[ 87.940115][ T5322] ? __pfx_netlink_unicast+0x10/0x10
[ 87.942409][ T5322] ? netlink_sendmsg+0x650/0xb40
[ 87.944784][ T5322] ? skb_put+0x11b/0x210
[ 87.947066][ T5322] netlink_sendmsg+0x813/0xb40
[ 87.950058][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10
[ 87.954268][ T5322] ? aa_sock_msg_perm+0xf1/0x1b0
[ 87.956610][ T5322] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 87.958911][ T5322] ____sys_sendmsg+0x972/0x9f0
[ 87.961154][ T5322] ? futex_unqueue+0x211/0x240
[ 87.963144][ T5322] ? __pfx_____sys_sendmsg+0x10/0x10
[ 87.965314][ T5322] ? import_iovec+0x73/0xa0
[ 87.967491][ T5322] ___sys_sendmsg+0x2a5/0x360
[ 87.970079][ T5322] ? __pfx____sys_sendmsg+0x10/0x10
[ 87.972615][ T5322] ? futex_wait+0x29a/0x380
[ 87.974263][ T5322] ? __fget_files+0x2a/0x420
[ 87.975952][ T5322] ? __fget_files+0x3a0/0x420
[ 87.977610][ T5322] __x64_sys_sendmsg+0x1bd/0x2a0
[ 87.979765][ T5322] ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 87.982074][ T5322] ? rcu_is_watching+0x15/0xb0
[ 87.984177][ T5322] do_syscall_64+0x14d/0xf80
[ 87.986663][ T5322] ? trace_irq_disable+0x3b/0x150
[ 87.989565][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.992081][ T5322] ? clear_bhb_loop+0x40/0x90
[ 87.994126][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.996690][ T5322] RIP: 0033:0x7f92ad59c819
[ 87.998791][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.007326][ T5322] RSP: 002b:00007f92ae4c2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 88.011982][ T5322] RAX: ffffffffffffffda RBX: 00007f92ad815fa0 RCX: 00007f92ad59c819
[ 88.016837][ T5322] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008
[ 88.020390][ T5322] RBP: 00007f92ad632c91 R08: 0000000000000000 R09: 0000000000000000
[ 88.023692][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.027137][ T5322] R13: 00007f92ad816038 R14: 00007f92ad815fa0 R15: 00007fff8506f788
[ 88.030653][ T5322]
[ 88.032573][ T5322] Kernel Offset: disabled
[ 88.034855][ T5322] Rebooting in 86400 seconds..