WARNING in rdma_restrack_clean (2)

Status: upstream: reported on 2026/06/07 05:29
Subsystems: rdma
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+47c9ad191991e1bb459b@syzkaller.appspotmail.com
First crash: 109d, last: 20h49m
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
223e7473 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ WARNING in rdma_restrack_clean (2) 2026/06/10 00:33 2026/06/10 00:33 2026/06/10 00:49 c36c07f6
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [rdma?] WARNING in rdma_restrack_clean (2) 0 (1) 2026/06/07 05:29
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in rdma_restrack_clean -1 1 587d 587d 0/3 auto-obsoleted due to no activity on 2025/05/21 13:05
linux-5.15 WARNING in rdma_restrack_clean (3) -1 17 46d 135d 0/3 upstream: reported on 2026/05/08 04:31
linux-5.15 WARNING in rdma_restrack_clean (2) -1 9 235d 472d 0/3 auto-obsoleted due to no activity on 2026/05/07 20:10
upstream WARNING in rdma_restrack_clean rdma -1 2 523d 609d 0/29 auto-obsoleted due to no activity on 2025/07/24 09:06

Sample crash report:
siw: device registration error -23
smc: removing ib device syz0
smbdirect: ib_dev[syz0] removed
------------[ cut here ]------------
!xa_empty(xa)
WARNING: drivers/infiniband/core/restrack.c:52 at rdma_restrack_clean+0xc9/0x110 drivers/infiniband/core/restrack.c:52, CPU#1: syz.3.5243/27660
Modules linked in:
CPU: 1 UID: 0 PID: 27660 Comm: syz.3.5243 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
RIP: 0010:rdma_restrack_clean+0xc9/0x110 drivers/infiniband/core/restrack.c:52
Code: 0f 00 00 e8 19 2b 37 f9 4c 01 e3 48 8d 7b 48 48 89 f8 48 c1 e8 03 42 80 3c 30 00 75 2f 48 83 7b 48 00 74 a8 e8 f8 2a 37 f9 90 <0f> 0b 90 eb 9d e8 ed 2a 37 f9 48 8b 7c 24 08 48 83 c4 10 5b 5d 41
RSP: 0018:ffffc90003dff168 EFLAGS: 00010246
RAX: 0000000000080000 RBX: ffff88802b3e9800 RCX: ffffc900281fa000
RDX: 0000000000080000 RSI: ffffffff88d4e398 RDI: ffff88802b3e9848
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888036648000 R14: dffffc0000000000 R15: ffffed1006cc91e0
FS:  00007f8307dd56c0(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdd3da1f80 CR3: 000000005eece000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ib_dealloc_device+0x17e/0x230 drivers/infiniband/core/device.c:710
 __ib_unregister_device+0x396/0x480 drivers/infiniband/core/device.c:1589
 ib_unregister_device_and_put+0x5a/0x80 drivers/infiniband/core/device.c:1636
 nldev_dellink+0x308/0x440 drivers/infiniband/core/nldev.c:1902
 rdma_nl_rcv_msg+0x392/0x6f0 drivers/infiniband/core/netlink.c:195
 rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 drivers/infiniband/core/netlink.c:239
 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline]
 netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1364
 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:800 [inline]
 __sock_sendmsg net/socket.c:815 [inline]
 ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
 __sys_sendmsg+0x160/0x210 net/socket.c:2799
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8309b9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f8307dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f8309e26180 RCX: 00007f8309b9e159
RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006
RBP: 00007f8309c3506b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8309e26218 R14: 00007f8309e26180 R15: 00007ffd41abe228
 </TASK>

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/19 19:08 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in rdma_restrack_clean
2026/08/20 17:29 upstream a4ff2be345d0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in rdma_restrack_clean
2026/08/19 23:02 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in rdma_restrack_clean
2026/08/15 18:42 upstream 15ef2f78c49d 746171ee .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in rdma_restrack_clean
2026/07/04 14:46 upstream 71dfdfb0209b fcece630 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in rdma_restrack_clean
2026/06/21 15:07 upstream 390d73adf896 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in rdma_restrack_clean
2026/06/03 05:16 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 4b4362973b6f 3c0d2131 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in rdma_restrack_clean
* Struck through repros no longer work on HEAD.