bisecting cause commit starting from 425c075dcbb2009a526fffb40ada846acc40d2b1 building syzkaller on 2e9971bbbfb4df6ba0118353163a7703f3dbd6ec testing commit 425c075dcbb2009a526fffb40ada846acc40d2b1 with gcc (GCC) 8.1.0 kernel signature: 96706d36bac582401c8303720a55fb2e9c2e4e0bab91bd9ae8d3e2c4d5a40fb9 run #0: crashed: possible deadlock in cma_netdev_callback run #1: crashed: possible deadlock in cma_netdev_callback run #2: crashed: possible deadlock in cma_netdev_callback run #3: crashed: possible deadlock in cma_netdev_callback run #4: crashed: possible deadlock in cma_netdev_callback run #5: crashed: possible deadlock in cma_netdev_callback run #6: crashed: possible deadlock in cma_netdev_callback run #7: crashed: possible deadlock in cma_netdev_callback run #8: crashed: possible deadlock in siw_create_listen run #9: crashed: possible deadlock in cma_netdev_callback testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.1.0 kernel signature: bdfd3e0f685858b2680a3548959a53bdbafb8a01fbd06791e0a28522a055cc0c run #0: crashed: possible deadlock in siw_create_listen run #1: crashed: possible deadlock in siw_create_listen run #2: crashed: possible deadlock in cma_netdev_callback run #3: crashed: possible deadlock in siw_create_listen run #4: crashed: possible deadlock in siw_create_listen run #5: crashed: possible deadlock in cma_netdev_callback run #6: crashed: possible deadlock in siw_create_listen run #7: crashed: possible deadlock in cma_netdev_callback run #8: crashed: possible deadlock in cma_netdev_callback run #9: crashed: possible deadlock in siw_create_listen testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: 7209d0fa830c089f470ece0ac658ef8a50a7c80e8009c5f68f8d0e1eff961f81 all runs: OK # git bisect start d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 219d54332a09e8d8741c1e1982f5eae56099de85 Bisecting: 8639 revisions left to test after this (roughly 13 steps) [8c39f71ee2019e77ee14f88b1321b2348db51820] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 8c39f71ee2019e77ee14f88b1321b2348db51820 with gcc (GCC) 8.1.0 kernel signature: 832d35154a3c90c3397e6f058823d5ae83b6145d72485acdf39110ed90c44d01 run #0: crashed: possible deadlock in siw_create_listen run #1: crashed: possible deadlock in cma_netdev_callback run #2: crashed: possible deadlock in siw_create_listen run #3: crashed: possible deadlock in siw_create_listen run #4: crashed: possible deadlock in cma_netdev_callback run #5: crashed: possible deadlock in cma_netdev_callback run #6: crashed: possible deadlock in cma_netdev_callback run #7: crashed: possible deadlock in cma_netdev_callback run #8: crashed: possible deadlock in cma_netdev_callback run #9: crashed: possible deadlock in cma_netdev_callback # git bisect bad 8c39f71ee2019e77ee14f88b1321b2348db51820 Bisecting: 3435 revisions left to test after this (roughly 12 steps) [3b397c7ccafe0624018cb09fc96729f8f6165573] Merge tag 'regmap-v5.5' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap testing commit 3b397c7ccafe0624018cb09fc96729f8f6165573 with gcc (GCC) 8.1.0 kernel signature: 699ab04379c11b7b0e06444c6082794b29c19d2deeb8e498d8b7073e2313fa89 run #0: crashed: possible deadlock in siw_create_listen run #1: crashed: possible deadlock in cma_netdev_callback run #2: crashed: possible deadlock in cma_netdev_callback run #3: crashed: possible deadlock in cma_netdev_callback run #4: crashed: possible deadlock in cma_netdev_callback run #5: crashed: possible deadlock in cma_netdev_callback run #6: crashed: possible deadlock in cma_netdev_callback run #7: crashed: possible deadlock in cma_netdev_callback run #8: crashed: possible deadlock in siw_create_listen run #9: crashed: possible deadlock in cma_netdev_callback # git bisect bad 3b397c7ccafe0624018cb09fc96729f8f6165573 Bisecting: 1709 revisions left to test after this (roughly 11 steps) [924ea58dadea23cc28b60d02b9c0896b7b168a6f] Merge tag 'mt76-for-kvalo-2019-11-20' of https://github.com/nbd168/wireless testing commit 924ea58dadea23cc28b60d02b9c0896b7b168a6f with gcc (GCC) 8.1.0 kernel signature: 0afdb72eddf81da82e2d4e19697f5376b2d81f09d27943cf82e76362b7d271ee run #0: crashed: possible deadlock in cma_netdev_callback run #1: crashed: possible deadlock in cma_netdev_callback run #2: crashed: possible deadlock in rtnl_lock run #3: crashed: possible deadlock in rtnl_lock run #4: crashed: possible deadlock in rtnl_lock run #5: crashed: possible deadlock in rtnl_lock run #6: crashed: possible deadlock in cma_netdev_callback run #7: crashed: possible deadlock in cma_netdev_callback run #8: crashed: possible deadlock in rtnl_lock run #9: crashed: possible deadlock in rtnl_lock # git bisect bad 924ea58dadea23cc28b60d02b9c0896b7b168a6f Bisecting: 855 revisions left to test after this (roughly 10 steps) [3b7ad08b5153b0eda2f4d57ac53d815c30acd172] vsock: Simplify '__vsock_release()' testing commit 3b7ad08b5153b0eda2f4d57ac53d815c30acd172 with gcc (GCC) 8.1.0 kernel signature: 867f254c6f909938d39a236278688f88347e04b8050947536b7750f0130ee14d all runs: OK # git bisect good 3b7ad08b5153b0eda2f4d57ac53d815c30acd172 Bisecting: 427 revisions left to test after this (roughly 9 steps) [c33fdc3453313137f8740a227525ed518bc68e28] tipc: fix update of the uninitialized variable err testing commit c33fdc3453313137f8740a227525ed518bc68e28 with gcc (GCC) 8.1.0 kernel signature: 4b5b556a5171e82864c93342ad73643f04d9f7f1fe49e213582fff8ba377ce09 run #0: crashed: possible deadlock in cma_netdev_callback run #1: crashed: possible deadlock in cma_netdev_callback run #2: crashed: possible deadlock in cma_netdev_callback run #3: crashed: possible deadlock in cma_netdev_callback run #4: crashed: possible deadlock in cma_netdev_callback run #5: crashed: possible deadlock in rtnl_lock run #6: crashed: possible deadlock in rtnl_lock run #7: crashed: possible deadlock in rtnl_lock run #8: crashed: possible deadlock in cma_netdev_callback run #9: crashed: possible deadlock in rtnl_lock # git bisect bad c33fdc3453313137f8740a227525ed518bc68e28 Bisecting: 213 revisions left to test after this (roughly 8 steps) [a9b97286fec1a87976ac7852ad65f2013faad9f6] gianfar: Maximize Rx buffer size testing commit a9b97286fec1a87976ac7852ad65f2013faad9f6 with gcc (GCC) 8.1.0 kernel signature: 6b95e3435863a542a1a172260fc99d821caed9d8ae5a453b683d157284f6a8b1 run #0: crashed: possible deadlock in rtnl_lock run #1: crashed: possible deadlock in cma_netdev_callback run #2: crashed: possible deadlock in cma_netdev_callback run #3: crashed: possible deadlock in cma_netdev_callback run #4: crashed: possible deadlock in rtnl_lock run #5: crashed: possible deadlock in rtnl_lock run #6: crashed: possible deadlock in rtnl_lock run #7: crashed: possible deadlock in rtnl_lock run #8: crashed: possible deadlock in rtnl_lock run #9: crashed: possible deadlock in cma_netdev_callback # git bisect bad a9b97286fec1a87976ac7852ad65f2013faad9f6 Bisecting: 106 revisions left to test after this (roughly 7 steps) [ac8efe4f4a84c6bf59237f77a5db65410bf20241] rtlwifi: rtl8192ee: Remove set but not used variable 'cur_tx_wp' testing commit ac8efe4f4a84c6bf59237f77a5db65410bf20241 with gcc (GCC) 8.1.0 kernel signature: 37e191ae2652fa8676961ee618eabb44fa0c38793ad61862bd7b730a158bd308 all runs: OK # git bisect good ac8efe4f4a84c6bf59237f77a5db65410bf20241 Bisecting: 48 revisions left to test after this (roughly 6 steps) [03029ed42f01bd146062d597fc7f3e738f91be88] Merge tag 'iwlwifi-next-for-kalle-2019-10-18-2' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next testing commit 03029ed42f01bd146062d597fc7f3e738f91be88 with gcc (GCC) 8.1.0 kernel signature: 95be3b413e4fa97e92a799587cd5457ecd11b4e08b0d6e06c4c170a86ceccd5a all runs: OK # git bisect good 03029ed42f01bd146062d597fc7f3e738f91be88 Bisecting: 25 revisions left to test after this (roughly 5 steps) [9647722befbedcd6735e00655ffec392c05f0c56] r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2 testing commit 9647722befbedcd6735e00655ffec392c05f0c56 with gcc (GCC) 8.1.0 kernel signature: d18e349951b253cc11918e87d9518343ef93ecc5c1b2963f0ae063421613f88e all runs: OK # git bisect good 9647722befbedcd6735e00655ffec392c05f0c56 Bisecting: 12 revisions left to test after this (roughly 4 steps) [086ddf860650cfa3065d6698fae81335b1846cdb] mt7601u: use DEFINE_DEBUGFS_ATTRIBUTE to define debugfs fops testing commit 086ddf860650cfa3065d6698fae81335b1846cdb with gcc (GCC) 8.1.0 kernel signature: c1881ad9f80c9245e3136a463d8809bd7d8ce1448cb470249c1065adff50da16 all runs: OK # git bisect good 086ddf860650cfa3065d6698fae81335b1846cdb Bisecting: 6 revisions left to test after this (roughly 3 steps) [d673f56358528fca20bc140a4343a16c24ffeb97] Merge tag 'batadv-next-for-davem-20191105' of git://git.open-mesh.org/linux-merge testing commit d673f56358528fca20bc140a4343a16c24ffeb97 with gcc (GCC) 8.1.0 kernel signature: beded9e6a0c902ddba3cc4e25491f85927995e6c015fc478a76fe47f9c03ae92 all runs: OK # git bisect good d673f56358528fca20bc140a4343a16c24ffeb97 Bisecting: 2 revisions left to test after this (roughly 2 steps) [fb90ab6ba93cb6bd590b031630e250a5367a5336] Merge branch 'netdevsim-fix-tests-and-netdevsim' testing commit fb90ab6ba93cb6bd590b031630e250a5367a5336 with gcc (GCC) 8.1.0 kernel signature: 5d3906dc1cb038ce0e4dbc3409950d75c4c45a30bece7ec252861fdbd4279866 run #0: crashed: possible deadlock in rtnl_lock run #1: crashed: possible deadlock in rtnl_lock run #2: crashed: possible deadlock in cma_netdev_callback run #3: crashed: possible deadlock in cma_netdev_callback run #4: crashed: possible deadlock in cma_netdev_callback run #5: crashed: possible deadlock in rtnl_lock run #6: crashed: possible deadlock in cma_netdev_callback run #7: crashed: possible deadlock in cma_netdev_callback run #8: crashed: possible deadlock in rtnl_lock run #9: crashed: possible deadlock in cma_netdev_callback # git bisect bad fb90ab6ba93cb6bd590b031630e250a5367a5336 Bisecting: 1 revision left to test after this (roughly 1 step) [bfcccfe78b361f5f6ef48554aed5bcd30c72f67f] netdevsim: drop code duplicated by a merge testing commit bfcccfe78b361f5f6ef48554aed5bcd30c72f67f with gcc (GCC) 8.1.0 kernel signature: 1d46aa7dd07774f35c0b1dfacd6eab2950209735d878e706b829e01b0537cb1d run #0: crashed: possible deadlock in cma_netdev_callback run #1: crashed: possible deadlock in cma_netdev_callback run #2: crashed: possible deadlock in rtnl_lock run #3: crashed: possible deadlock in cma_netdev_callback run #4: crashed: possible deadlock in rtnl_lock run #5: crashed: possible deadlock in cma_netdev_callback run #6: crashed: possible deadlock in cma_netdev_callback run #7: crashed: possible deadlock in rtnl_lock run #8: crashed: possible deadlock in rtnl_lock run #9: crashed: possible deadlock in rtnl_lock # git bisect bad bfcccfe78b361f5f6ef48554aed5bcd30c72f67f Bisecting: 0 revisions left to test after this (roughly 0 steps) [a3ead21d6eec4d18b48466c7b978566bc9cab676] Merge tag 'wireless-drivers-next-2019-11-05' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next testing commit a3ead21d6eec4d18b48466c7b978566bc9cab676 with gcc (GCC) 8.1.0 kernel signature: f8a86eb59ce8ea0cf6aa1b1e540c0130bd0b06225c6d9475fa04b195e9c0705e all runs: OK # git bisect good a3ead21d6eec4d18b48466c7b978566bc9cab676 bfcccfe78b361f5f6ef48554aed5bcd30c72f67f is the first bad commit commit bfcccfe78b361f5f6ef48554aed5bcd30c72f67f Author: Jakub Kicinski Date: Tue Nov 5 13:26:11 2019 -0800 netdevsim: drop code duplicated by a merge Looks like the port adding loop makes a re-appearance on net-next after net was merged back into it (even though it doesn't feature in the merge diff). The ports are already added in nsim_dev_create() so when we try to add them again get EEXIST, and see: netdevsim: probe of netdevsim0 failed with error -17 in the logs. When we remove the loop again the nsim_dev_probe() and nsim_dev_remove() become a wrapper of nsim_dev_create() and nsim_dev_destroy(). Remove this layer of indirection. Fixes: d31e95585ca6 ("Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net") Signed-off-by: Jakub Kicinski Acked-by: Jiri Pirko Signed-off-by: David S. Miller drivers/net/netdevsim/dev.c | 47 ++++++++------------------------------------- 1 file changed, 8 insertions(+), 39 deletions(-) culprit signature: 1d46aa7dd07774f35c0b1dfacd6eab2950209735d878e706b829e01b0537cb1d parent signature: f8a86eb59ce8ea0cf6aa1b1e540c0130bd0b06225c6d9475fa04b195e9c0705e revisions tested: 17, total time: 3h46m57.849504889s (build: 1h47m34.159324288s, test: 1h58m6.364273153s) first bad commit: bfcccfe78b361f5f6ef48554aed5bcd30c72f67f netdevsim: drop code duplicated by a merge cc: ["davem@davemloft.net" "jakub.kicinski@netronome.com" "jiri@mellanox.com"] crash: possible deadlock in rtnl_lock iwpm_register_pid: Unable to send a nlmsg (client = 2) ====================================================== WARNING: possible circular locking dependency detected 5.4.0-rc5-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.4/8136 is trying to acquire lock: ffffffff89826ee0 (rtnl_mutex){+.+.}, at: rtnl_lock+0x12/0x20 net/core/rtnetlink.c:72 but task is already holding lock: ffffffff896d05a0 (lock#3){+.+.}, at: cma_add_one+0x583/0x890 drivers/infiniband/core/cma.c:4593 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (lock#3){+.+.}: __mutex_lock_common kernel/locking/mutex.c:956 [inline] __mutex_lock+0x155/0x1410 kernel/locking/mutex.c:1103 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1118 cma_netdev_callback+0x92/0x380 drivers/infiniband/core/cma.c:4535 notifier_call_chain+0x8a/0x160 kernel/notifier.c:95 __raw_notifier_call_chain kernel/notifier.c:396 [inline] raw_notifier_call_chain+0x11/0x20 kernel/notifier.c:403 call_netdevice_notifiers_info+0x87/0xd0 net/core/dev.c:1893 call_netdevice_notifiers_extack net/core/dev.c:1905 [inline] call_netdevice_notifiers+0x67/0x90 net/core/dev.c:1919 bond_change_active_slave+0xbf9/0x1db0 drivers/net/bonding/bond_main.c:942 bond_select_active_slave+0x1ca/0x940 drivers/net/bonding/bond_main.c:984 bond_enslave+0x1d26/0x45c0 drivers/net/bonding/bond_main.c:1821 do_set_master+0x18a/0x210 net/core/rtnetlink.c:2426 __rtnl_newlink+0xf0c/0x1420 net/core/rtnetlink.c:3295 rtnl_newlink+0x61/0x90 net/core/rtnetlink.c:3326 rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:5387 netlink_rcv_skb+0x13c/0x380 net/netlink/af_netlink.c:2477 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:5405 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline] netlink_unicast+0x43b/0x640 net/netlink/af_netlink.c:1328 netlink_sendmsg+0x74b/0xc00 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:657 ___sys_sendmsg+0x647/0x950 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xca/0x5d0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe -> #0 (rtnl_mutex){+.+.}: check_prev_add kernel/locking/lockdep.c:2476 [inline] check_prevs_add kernel/locking/lockdep.c:2581 [inline] validate_chain kernel/locking/lockdep.c:2971 [inline] __lock_acquire+0x2899/0x4ef0 kernel/locking/lockdep.c:3955 lock_acquire+0x194/0x410 kernel/locking/lockdep.c:4487 __mutex_lock_common kernel/locking/mutex.c:956 [inline] __mutex_lock+0x155/0x1410 kernel/locking/mutex.c:1103 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1118 rtnl_lock+0x12/0x20 net/core/rtnetlink.c:72 siw_create_listen+0x246/0xa10 drivers/infiniband/sw/siw/siw_cm.c:1977 iw_cm_listen+0x10f/0x180 drivers/infiniband/core/iwcm.c:582 cma_iw_listen drivers/infiniband/core/cma.c:2448 [inline] rdma_listen+0x521/0x7f0 drivers/infiniband/core/cma.c:3555 cma_listen_on_dev+0x4df/0x620 drivers/infiniband/core/cma.c:2498 cma_add_one+0x636/0x890 drivers/infiniband/core/cma.c:4596 add_client_context+0x30d/0x3c0 drivers/infiniband/core/device.c:683 enable_device_and_get+0x1bf/0x360 drivers/infiniband/core/device.c:1306 ib_register_device+0x88b/0xd10 drivers/infiniband/core/device.c:1370 siw_device_register drivers/infiniband/sw/siw/siw_main.c:69 [inline] siw_newlink+0xb89/0xf20 drivers/infiniband/sw/siw/siw_main.c:576 nldev_newlink+0x21d/0x3c0 drivers/infiniband/core/nldev.c:1492 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:195 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0x49c/0x8c0 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline] netlink_unicast+0x43b/0x640 net/netlink/af_netlink.c:1328 netlink_sendmsg+0x74b/0xc00 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:657 ___sys_sendmsg+0x647/0x950 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xca/0x5d0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(lock#3); lock(rtnl_mutex); lock(lock#3); lock(rtnl_mutex); *** DEADLOCK *** 6 locks held by syz-executor.4/8136: #0: ffffffff8b443000 (&rdma_nl_types[idx].sem){.+.+}, at: rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:164 [inline] #0: ffffffff8b443000 (&rdma_nl_types[idx].sem){.+.+}, at: rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] #0: ffffffff8b443000 (&rdma_nl_types[idx].sem){.+.+}, at: rdma_nl_rcv+0x35c/0x8c0 drivers/infiniband/core/netlink.c:259 #1: ffffffff896ca3e8 (link_ops_rwsem){++++}, at: nldev_newlink+0x1e4/0x3c0 drivers/infiniband/core/nldev.c:1482 #2: ffffffff896bf3a8 (devices_rwsem){++++}, at: enable_device_and_get+0x115/0x360 drivers/infiniband/core/device.c:1296 #3: ffffffff896bf268 (clients_rwsem){++++}, at: enable_device_and_get+0x163/0x360 drivers/infiniband/core/device.c:1304 #4: ffff8880988e64a0 (&device->client_data_rwsem){++++}, at: add_client_context+0x2e0/0x3c0 drivers/infiniband/core/device.c:681 #5: ffffffff896d05a0 (lock#3){+.+.}, at: cma_add_one+0x583/0x890 drivers/infiniband/core/cma.c:4593 stack backtrace: CPU: 1 PID: 8136 Comm: syz-executor.4 Not tainted 5.4.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x113/0x167 lib/dump_stack.c:113 print_circular_bug.isra.39.cold.58+0x15a/0x169 kernel/locking/lockdep.c:1685 check_noncircular+0x349/0x400 kernel/locking/lockdep.c:1809 check_prev_add kernel/locking/lockdep.c:2476 [inline] check_prevs_add kernel/locking/lockdep.c:2581 [inline] validate_chain kernel/locking/lockdep.c:2971 [inline] __lock_acquire+0x2899/0x4ef0 kernel/locking/lockdep.c:3955 lock_acquire+0x194/0x410 kernel/locking/lockdep.c:4487 __mutex_lock_common kernel/locking/mutex.c:956 [inline] __mutex_lock+0x155/0x1410 kernel/locking/mutex.c:1103 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1118 rtnl_lock+0x12/0x20 net/core/rtnetlink.c:72 siw_create_listen+0x246/0xa10 drivers/infiniband/sw/siw/siw_cm.c:1977 iw_cm_listen+0x10f/0x180 drivers/infiniband/core/iwcm.c:582 cma_iw_listen drivers/infiniband/core/cma.c:2448 [inline] rdma_listen+0x521/0x7f0 drivers/infiniband/core/cma.c:3555 cma_listen_on_dev+0x4df/0x620 drivers/infiniband/core/cma.c:2498 cma_add_one+0x636/0x890 drivers/infiniband/core/cma.c:4596 add_client_context+0x30d/0x3c0 drivers/infiniband/core/device.c:683 enable_device_and_get+0x1bf/0x360 drivers/infiniband/core/device.c:1306 ib_register_device+0x88b/0xd10 drivers/infiniband/core/device.c:1370 siw_device_register drivers/infiniband/sw/siw/siw_main.c:69 [inline] siw_newlink+0xb89/0xf20 drivers/infiniband/sw/siw/siw_main.c:576 nldev_newlink+0x21d/0x3c0 drivers/infiniband/core/nldev.c:1492 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:195 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0x49c/0x8c0 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline] netlink_unicast+0x43b/0x640 net/netlink/af_netlink.c:1328 netlink_sendmsg+0x74b/0xc00 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:657 ___sys_sendmsg+0x647/0x950 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xca/0x5d0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c4a9 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f0d757d7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f0d757d86d4 RCX: 000000000045c4a9 RDX: 0000000000000000 RSI: 00000000200031c0 RDI: 0000000000000005 RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000009a3 R14: 00000000004d5798 R15: 000000000076bf2c infiniband syz2: RDMA CMA: cma_listen_on_dev, error -22