infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 smc: removing ib device rxe0 ------------[ cut here ]------------ WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116, CPU#0: syz.7.625/8175 Modules linked in: CPU: 0 UID: 0 PID: 8175 Comm: syz.7.625 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116 lr : rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116 sp : ffff800094b46f40 x29: ffff800094b46f40 x28: dfff800000000000 x27: ffff0000d5bc2706 x26: dfff800000000000 x25: ffff0000d4b25148 x24: dfff800000000000 x23: 1fffe0001a9649f9 x22: ffff0000d4b24fc8 x21: dfff800000000000 x20: ffff80008455fca0 x19: ffff0000d4b25468 x18: 00000000ffffffff x17: 4d45545359534255 x16: 5300306578722f64 x15: 0000000000000001 x14: 00000000008c0916 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 x8 : ffff80009b136000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000843e0a2c x2 : 0000000000000002 x1 : ffff00010a8dbb00 x0 : 0000000000000001 Call trace: rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116 (P) rxe_dealloc+0x30/0xd0 drivers/infiniband/sw/rxe/rxe.c:26 ib_dealloc_device+0x50/0x1e0 drivers/infiniband/core/device.c:691 __ib_unregister_device+0x2bc/0x33c drivers/infiniband/core/device.c:1589 ib_unregister_device_and_put+0x5c/0x80 drivers/infiniband/core/device.c:1636 nldev_dellink+0x330/0x374 drivers/infiniband/core/nldev.c:1902 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0x4f0/0x814 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 ____sys_sendmsg+0x3d0/0x6c8 net/socket.c:2713 ___sys_sendmsg+0x198/0x224 net/socket.c:2767 __sys_sendmsg+0x158/0x204 net/socket.c:2799 __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __arm64_sys_sendmsg+0x88/0x9c net/socket.c:2802 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 irq event stamp: 195302 hardirqs last enabled at (195301): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (195301): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (195302): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483 softirqs last enabled at (195196): [] __alloc_skb+0x1c0/0x610 net/core/skbuff.c:698 softirqs last disabled at (195194): [] local_bh_disable include/linux/bottom_half.h:20 [inline] softirqs last disabled at (195194): [] __alloc_skb+0x1a8/0x610 net/core/skbuff.c:697 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116, CPU#0: syz.7.625/8175 Modules linked in: CPU: 0 UID: 0 PID: 8175 Comm: syz.7.625 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116 lr : rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116 sp : ffff800094b46f40 x29: ffff800094b46f40 x28: dfff800000000000 x27: ffff0000d5bc2706 x26: dfff800000000000 x25: ffff0000d4b25148 x24: dfff800000000000 x23: 1fffe0001a9649f9 x22: ffff0000d4b24fc8 x21: dfff800000000000 x20: ffff80008455fca0 x19: ffff0000d4b25760 x18: 00000000ffffffff x17: 4d45545359534255 x16: 5300306578722f64 x15: 0000000000000001 x14: 00000000008c0916 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 x8 : ffff80009b136000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000843e0a2c x2 : 0000000000000002 x1 : ffff00010a8dbb00 x0 : 0000000000000001 Call trace: rxe_pool_cleanup+0x58/0x60 drivers/infiniband/sw/rxe/rxe_pool.c:116 (P) rxe_dealloc+0x6c/0xd0 drivers/infiniband/sw/rxe/rxe.c:31 ib_dealloc_device+0x50/0x1e0 drivers/infiniband/core/device.c:691 __ib_unregister_device+0x2bc/0x33c drivers/infiniband/core/device.c:1589 ib_unregister_device_and_put+0x5c/0x80 drivers/infiniband/core/device.c:1636 nldev_dellink+0x330/0x374 drivers/infiniband/core/nldev.c:1902 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0x4f0/0x814 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 ____sys_sendmsg+0x3d0/0x6c8 net/socket.c:2713 ___sys_sendmsg+0x198/0x224 net/socket.c:2767 __sys_sendmsg+0x158/0x204 net/socket.c:2799 __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __arm64_sys_sendmsg+0x88/0x9c net/socket.c:2802 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 irq event stamp: 195918 hardirqs last enabled at (195917): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (195917): [] __arm64_exit_to_kernel_mode+0x70/0xcc arch/arm64/kernel/entry-common.c:98 hardirqs last disabled at (195918): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483 softirqs last enabled at (195916): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (195916): [] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673 softirqs last disabled at (195305): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: drivers/infiniband/core/restrack.c:52 at rdma_restrack_clean+0xa4/0xd4 drivers/infiniband/core/restrack.c:52, CPU#0: syz.7.625/8175 Modules linked in: CPU: 0 UID: 0 PID: 8175 Comm: syz.7.625 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : rdma_restrack_clean+0xa4/0xd4 drivers/infiniband/core/restrack.c:52 lr : rdma_restrack_clean+0xa4/0xd4 drivers/infiniband/core/restrack.c:52 sp : ffff800094b46f30 x29: ffff800094b46f30 x28: dfff800000000000 x27: ffff0000d5bc2706 x26: dfff800000000000 x25: ffff0000d54fa800 x24: ffff0000d54fa848 x23: 0000000000000048 x22: 1fffe0001a9649e2 x21: dfff800000000000 x20: ffff0000d54fa800 x19: ffff0000d4b24f10 x18: 00000000ffffffff x17: 4d45545359534255 x16: 5300306578722f64 x15: 0000000000000001 x14: 00000000008c0d06 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 x8 : ffff80009b136000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000843deed0 x2 : 0000000000000000 x1 : ffff00010a8dbb00 x0 : 0000000000000001 Call trace: rdma_restrack_clean+0xa4/0xd4 drivers/infiniband/core/restrack.c:52 (P) ib_dealloc_device+0x14c/0x1e0 drivers/infiniband/core/device.c:710 __ib_unregister_device+0x2bc/0x33c drivers/infiniband/core/device.c:1589 ib_unregister_device_and_put+0x5c/0x80 drivers/infiniband/core/device.c:1636 nldev_dellink+0x330/0x374 drivers/infiniband/core/nldev.c:1902 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0x4f0/0x814 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 ____sys_sendmsg+0x3d0/0x6c8 net/socket.c:2713 ___sys_sendmsg+0x198/0x224 net/socket.c:2767 __sys_sendmsg+0x158/0x204 net/socket.c:2799 __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __arm64_sys_sendmsg+0x88/0x9c net/socket.c:2802 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 irq event stamp: 196026 hardirqs last enabled at (196025): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (196025): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (196026): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483 softirqs last enabled at (196022): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (196022): [] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673 softirqs last disabled at (195921): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ GID entry ref leak for dev rxe0 index 1 ref=1 WARNING: drivers/infiniband/core/cache.c:800 at release_gid_table drivers/infiniband/core/cache.c:797 [inline], CPU#0: syz.7.625/8175 WARNING: drivers/infiniband/core/cache.c:800 at gid_table_release_one+0x2dc/0x450 drivers/infiniband/core/cache.c:876, CPU#0: syz.7.625/8175 Modules linked in: CPU: 0 UID: 0 PID: 8175 Comm: syz.7.625 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : release_gid_table drivers/infiniband/core/cache.c:797 [inline] pc : gid_table_release_one+0x2dc/0x450 drivers/infiniband/core/cache.c:876 lr : release_gid_table drivers/infiniband/core/cache.c:797 [inline] lr : gid_table_release_one+0x2dc/0x450 drivers/infiniband/core/cache.c:876 sp : ffff800094b46e00 x29: ffff800094b46e60 x28: ffff0000d9f28000 x27: ffff0000d9f280e0 x26: 0000000000000001 x25: 1fffe0001b3e501c x24: 0000000000000001 x23: ffff0000c35bc600 x22: dfff800000000000 x21: ffff0000d4b24798 x20: 1fffe0001b3e5000 x19: ffff80008ae89000 x18: 00000000ffffffff x17: 4d45545359534255 x16: 5300306578722f64 x15: ffff800084be53dc x14: 0000000000001325 x13: 0000000000000001 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000080000 x9 : 055d39b481c8e400 x8 : 055d39b481c8e400 x7 : ffff800080484084 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f4d68 x2 : 0000000100000000 x1 : ffff00010a8dbb00 x0 : 0000000000000001 Call trace: release_gid_table drivers/infiniband/core/cache.c:797 [inline] (P) gid_table_release_one+0x2dc/0x450 drivers/infiniband/core/cache.c:876 (P) ib_cache_release_one+0x144/0x174 drivers/infiniband/core/cache.c:1633 ib_device_release+0xc4/0x194 drivers/infiniband/core/device.c:506 device_release+0xb4/0x1d4 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1dc/0x4b8 lib/kobject.c:737 put_device+0x28/0x40 drivers/base/core.c:3884 ib_unregister_device_and_put+0x64/0x80 drivers/infiniband/core/device.c:1637 nldev_dellink+0x330/0x374 drivers/infiniband/core/nldev.c:1902 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0x4f0/0x814 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 ____sys_sendmsg+0x3d0/0x6c8 net/socket.c:2713 ___sys_sendmsg+0x198/0x224 net/socket.c:2767 __sys_sendmsg+0x158/0x204 net/socket.c:2799 __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __arm64_sys_sendmsg+0x88/0x9c net/socket.c:2802 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 irq event stamp: 196732 hardirqs last enabled at (196731): [] vprintk_store+0x924/0xb94 kernel/printk/printk.c:2385 hardirqs last disabled at (196732): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483 softirqs last enabled at (196692): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (196692): [] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673 softirqs last disabled at (196029): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]---