program: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="63f32d6c78c0d208", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/248, 0xf8}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005dc0)=ANY=[], 0x1bf0}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x20000008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r8) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) [ 86.454394][ T4680] Bluetooth: hci0: command tx timeout [ 86.730674][ T10] cfg80211: failed to load regulatory.db [ 86.888238][ T5333] infiniband syz0: set active [ 86.890475][ T5333] infiniband syz0: added bond0 [ 86.938007][ T5333] RDS/IB: syz0: added [ 86.943598][ T1369] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.951049][ T5333] smc: adding ib device syz0 with port count 1 [ 86.955703][ T5333] smc: ib device syz0 port 1 has pnetid [ 87.106258][ T1369] usb 5-1: config 0 has no interfaces? [ 87.112881][ T1369] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.117236][ T1369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.136204][ T1369] usb 5-1: config 0 descriptor?? [ 87.511998][ T5343] smc: removing ib device syz0 [ 87.774574][ T5343] ------------[ cut here ]------------ [ 87.777013][ T5343] WARNING: CPU: 0 PID: 5343 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x48/0x60 [ 87.782797][ T5343] Modules linked in: [ 87.785187][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 87.789627][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.794202][ T5343] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 87.796634][ T5343] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 4e 84 f9 48 83 3b 00 75 0c e8 15 d7 20 f9 5b e9 bf 51 c9 02 cc e8 09 d7 20 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 87.806882][ T5343] RSP: 0018:ffffc9000d3a7098 EFLAGS: 00010246 [ 87.809605][ T5343] RAX: ffffffff889f87e7 RBX: ffff88803e7213a0 RCX: 0000000000100000 [ 87.813093][ T5343] RDX: ffffc9000f074000 RSI: 00000000000fffff RDI: 0000000000100000 [ 87.816493][ T5343] RBP: ffff88803e721080 R08: ffff88803e720783 R09: 1ffff11007ce40f0 [ 87.819763][ T5343] R10: dffffc0000000000 R11: ffffffff889dc510 R12: dffffc0000000000 [ 87.823756][ T5343] R13: dffffc0000000000 R14: ffffffff889dc510 R15: dffffc0000000000 [ 87.828086][ T5343] FS: 00007f393d84f6c0(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 87.831876][ T5343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.834675][ T5343] CR2: 000020000001f000 CR3: 0000000043103000 CR4: 0000000000352ef0 [ 87.838171][ T5343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.842083][ T5343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.846962][ T5343] Call Trace: [ 87.848514][ T5343] [ 87.849888][ T5343] rxe_dealloc+0x27/0xc0 [ 87.851869][ T5343] ? __pfx_rxe_dealloc+0x10/0x10 [ 87.854250][ T5343] ib_dealloc_device+0x51/0x200 [ 87.856641][ T5343] __ib_unregister_device+0x393/0x3f0 [ 87.859518][ T5343] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 87.862802][ T5343] ib_unregister_device_and_put+0xb8/0xf0 [ 87.865346][ T5343] nldev_dellink+0x2d1/0x320 [ 87.867369][ T5343] ? __pfx_nldev_dellink+0x10/0x10 [ 87.869583][ T5343] ? rcu_is_watching+0x15/0xb0 [ 87.871659][ T5343] ? apparmor_capable+0x137/0x1b0 [ 87.873927][ T5343] ? bpf_lsm_capable+0x9/0x20 [ 87.876020][ T5343] ? security_capable+0x7e/0x2e0 [ 87.878667][ T5343] ? __pfx_nldev_dellink+0x10/0x10 [ 87.881838][ T5343] rdma_nl_rcv+0x6ab/0x980 [ 87.884324][ T5343] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 87.886445][ T5343] ? __lock_acquire+0xab9/0xd20 [ 87.888572][ T5343] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.891519][ T5343] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.893794][ T5343] netlink_unicast+0x75b/0x8d0 [ 87.895985][ T5343] netlink_sendmsg+0x805/0xb30 [ 87.898346][ T5343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.901154][ T5343] ? aa_sock_msg_perm+0x94/0x160 [ 87.903472][ T5343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 87.905838][ T5343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.908765][ T5343] __sock_sendmsg+0x219/0x270 [ 87.911254][ T5343] ____sys_sendmsg+0x505/0x830 [ 87.913958][ T5343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.916625][ T5343] ? import_iovec+0x74/0xa0 [ 87.918686][ T5343] ___sys_sendmsg+0x21f/0x2a0 [ 87.920836][ T5343] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.923345][ T5343] ? __fget_files+0x2a/0x420 [ 87.925776][ T5343] ? __fget_files+0x3a0/0x420 [ 87.928265][ T5343] __x64_sys_sendmsg+0x19b/0x260 [ 87.930552][ T5343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.933092][ T5343] ? rcu_is_watching+0x15/0xb0 [ 87.934964][ T5343] ? do_syscall_64+0xbe/0x3b0 [ 87.937250][ T5343] do_syscall_64+0xfa/0x3b0 [ 87.939693][ T5343] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.942066][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.944788][ T5343] ? clear_bhb_loop+0x60/0xb0 [ 87.946906][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.949374][ T5343] RIP: 0033:0x7f393c98e929 [ 87.951464][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.960304][ T5343] RSP: 002b:00007f393d84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.964197][ T5343] RAX: ffffffffffffffda RBX: 00007f393cbb6160 RCX: 00007f393c98e929 [ 87.968417][ T5343] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 87.972155][ T5343] RBP: 00007f393ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.975826][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.979525][ T5343] R13: 0000000000000000 R14: 00007f393cbb6160 R15: 00007ffefe928a38 [ 87.983698][ T5343] [ 87.985292][ T5343] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.989310][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 87.993839][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.998925][ T5343] Call Trace: [ 88.000690][ T5343] [ 88.002068][ T5343] dump_stack_lvl+0x99/0x250 [ 88.004314][ T5343] ? __asan_memcpy+0x40/0x70 [ 88.006273][ T5343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.008532][ T5343] ? __pfx__printk+0x10/0x10 [ 88.010768][ T5343] panic+0x2db/0x790 [ 88.012600][ T5343] ? __pfx_panic+0x10/0x10 [ 88.015133][ T5343] __warn+0x31b/0x4b0 [ 88.017512][ T5343] ? rxe_pool_cleanup+0x48/0x60 [ 88.019880][ T5343] ? rxe_pool_cleanup+0x48/0x60 [ 88.022125][ T5343] report_bug+0x2be/0x4f0 [ 88.023996][ T5343] ? rxe_pool_cleanup+0x48/0x60 [ 88.026194][ T5343] ? rxe_pool_cleanup+0x48/0x60 [ 88.028579][ T5343] ? rxe_pool_cleanup+0x4a/0x60 [ 88.031185][ T5343] handle_bug+0x84/0x160 [ 88.033497][ T5343] exc_invalid_op+0x1a/0x50 [ 88.035586][ T5343] asm_exc_invalid_op+0x1a/0x20 [ 88.037911][ T5343] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 88.040270][ T5343] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 4e 84 f9 48 83 3b 00 75 0c e8 15 d7 20 f9 5b e9 bf 51 c9 02 cc e8 09 d7 20 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 88.049702][ T5343] RSP: 0018:ffffc9000d3a7098 EFLAGS: 00010246 [ 88.052434][ T5343] RAX: ffffffff889f87e7 RBX: ffff88803e7213a0 RCX: 0000000000100000 [ 88.055912][ T5343] RDX: ffffc9000f074000 RSI: 00000000000fffff RDI: 0000000000100000 [ 88.059696][ T5343] RBP: ffff88803e721080 R08: ffff88803e720783 R09: 1ffff11007ce40f0 [ 88.063565][ T5343] R10: dffffc0000000000 R11: ffffffff889dc510 R12: dffffc0000000000 [ 88.067007][ T5343] R13: dffffc0000000000 R14: ffffffff889dc510 R15: dffffc0000000000 [ 88.071097][ T5343] ? __pfx_rxe_dealloc+0x10/0x10 [ 88.073310][ T5343] ? __pfx_rxe_dealloc+0x10/0x10 [ 88.075823][ T5343] ? rxe_pool_cleanup+0x47/0x60 [ 88.078543][ T5343] ? rxe_pool_cleanup+0x47/0x60 [ 88.081221][ T5343] rxe_dealloc+0x27/0xc0 [ 88.083438][ T5343] ? __pfx_rxe_dealloc+0x10/0x10 [ 88.085788][ T5343] ib_dealloc_device+0x51/0x200 [ 88.088132][ T5343] __ib_unregister_device+0x393/0x3f0 [ 88.090524][ T5343] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 88.093375][ T5343] ib_unregister_device_and_put+0xb8/0xf0 [ 88.098731][ T5343] nldev_dellink+0x2d1/0x320 [ 88.100866][ T5343] ? __pfx_nldev_dellink+0x10/0x10 [ 88.103163][ T5343] ? rcu_is_watching+0x15/0xb0 [ 88.105240][ T5343] ? apparmor_capable+0x137/0x1b0 [ 88.107670][ T5343] ? bpf_lsm_capable+0x9/0x20 [ 88.110061][ T5343] ? security_capable+0x7e/0x2e0 [ 88.112674][ T5343] ? __pfx_nldev_dellink+0x10/0x10 [ 88.115054][ T5343] rdma_nl_rcv+0x6ab/0x980 [ 88.117117][ T5343] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 88.119274][ T5343] ? __lock_acquire+0xab9/0xd20 [ 88.121648][ T5343] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.124683][ T5343] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.127497][ T5343] netlink_unicast+0x75b/0x8d0 [ 88.129895][ T5343] netlink_sendmsg+0x805/0xb30 [ 88.132356][ T5343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.135051][ T5343] ? aa_sock_msg_perm+0x94/0x160 [ 88.137559][ T5343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.140216][ T5343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.142614][ T5343] __sock_sendmsg+0x219/0x270 [ 88.145064][ T5343] ____sys_sendmsg+0x505/0x830 [ 88.147370][ T5343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.150082][ T5343] ? import_iovec+0x74/0xa0 [ 88.152379][ T5343] ___sys_sendmsg+0x21f/0x2a0 [ 88.154533][ T5343] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.157162][ T5343] ? __fget_files+0x2a/0x420 [ 88.159270][ T5343] ? __fget_files+0x3a0/0x420 [ 88.161513][ T5343] __x64_sys_sendmsg+0x19b/0x260 [ 88.164230][ T5343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.166679][ T5343] ? rcu_is_watching+0x15/0xb0 [ 88.168622][ T5343] ? do_syscall_64+0xbe/0x3b0 [ 88.170795][ T5343] do_syscall_64+0xfa/0x3b0 [ 88.172955][ T5343] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.175247][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.178382][ T5343] ? clear_bhb_loop+0x60/0xb0 [ 88.180544][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.183431][ T5343] RIP: 0033:0x7f393c98e929 [ 88.185440][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.193504][ T5343] RSP: 002b:00007f393d84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.197289][ T5343] RAX: ffffffffffffffda RBX: 00007f393cbb6160 RCX: 00007f393c98e929 [ 88.200944][ T5343] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 88.204919][ T5343] RBP: 00007f393ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.208455][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.212008][ T5343] R13: 0000000000000000 R14: 00007f393cbb6160 R15: 00007ffefe928a38 [ 88.215963][ T5343] [ 88.217880][ T5343] Kernel Offset: disabled [ 88.219771][ T5343] Rebooting in 86400 seconds..