------------[ cut here ]------------
GID entry ref leak for dev syz1 index 2 ref=1
WARNING: drivers/infiniband/core/cache.c:809 at 0x0, CPU#0: kworker/u8:17/6069
Modules linked in:
CPU: 0 UID: 0 PID: 6069 Comm: kworker/u8:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: ib-unreg-wq ib_unregister_work
RIP: 0010:release_gid_table drivers/infiniband/core/cache.c:806 [inline]
RIP: 0010:gid_table_release_one+0x2aa/0x440 drivers/infiniband/core/cache.c:886
Code: 00 48 89 ef be 04 00 00 00 e8 a2 fb d0 f9 48 89 e8 48 c1 e8 03 42 0f b6 04 28 84 c0 75 54 8b 4d 00 48 89 df 4c 89 fe 44 89 e2 <67> 48 0f b9 3a 4d 89 ef 4c 8b 6c 24 68 48 8b 44 24 70 42 0f b6 04
RSP: 0018:ffffc900056e78d0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffffff8f8ed240 RCX: 0000000000000001
RDX: 0000000000000002 RSI: ffff88801f6ac800 RDI: ffffffff8f8ed240
RBP: ffff8880223dd700 R08: ffff8880223dd703 R09: 1ffff1100447bae0
R10: dffffc0000000000 R11: ffffed100447bae1 R12: 0000000000000002
R13: dffffc0000000000 R14: ffff88807d4e7cd8 R15: ffff88801f6ac800
FS:  0000000000000000(0000) GS:ffff888126084000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000003fb00000000 CR3: 000000007691b000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ib_device_release+0xd2/0x1c0 drivers/infiniband/core/device.c:509
 device_release+0x9e/0x1d0 drivers/base/core.c:-1
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x228/0x480 lib/kobject.c:737
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
----------------
Code disassembly (best guess):
   0:	00 48 89             	add    %cl,-0x77(%rax)
   3:	ef                   	out    %eax,(%dx)
   4:	be 04 00 00 00       	mov    $0x4,%esi
   9:	e8 a2 fb d0 f9       	call   0xf9d0fbb0
   e:	48 89 e8             	mov    %rbp,%rax
  11:	48 c1 e8 03          	shr    $0x3,%rax
  15:	42 0f b6 04 28       	movzbl (%rax,%r13,1),%eax
  1a:	84 c0                	test   %al,%al
  1c:	75 54                	jne    0x72
  1e:	8b 4d 00             	mov    0x0(%rbp),%ecx
  21:	48 89 df             	mov    %rbx,%rdi
  24:	4c 89 fe             	mov    %r15,%rsi
  27:	44 89 e2             	mov    %r12d,%edx
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	4d 89 ef             	mov    %r13,%r15
  32:	4c 8b 6c 24 68       	mov    0x68(%rsp),%r13
  37:	48 8b 44 24 70       	mov    0x70(%rsp),%rax
  3c:	42                   	rex.X
  3d:	0f                   	.byte 0xf
  3e:	b6 04                	mov    $0x4,%dh