------------[ cut here ]------------ GID entry ref leak for dev syz1 index 2 ref=17 WARNING: CPU: 0 PID: 148 at drivers/infiniband/core/cache.c:809 release_gid_table drivers/infiniband/core/cache.c:806 [inline] WARNING: CPU: 0 PID: 148 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 Modules linked in: CPU: 0 PID: 148 Comm: kworker/u4:2 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Workqueue: events_unbound ib_unregister_work pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : release_gid_table drivers/infiniband/core/cache.c:806 [inline] pc : gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 lr : release_gid_table drivers/infiniband/core/cache.c:806 [inline] lr : gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 sp : ffff80001be67900 x29: ffff80001be67950 x28: ffff0000cb4bb800 x27: ffff0000cbdf2ad8 x26: ffff0000cbdf2a00 x25: 0000000000000010 x24: 0000000000000001 x23: ffff8000165c5000 x22: dfff800000000000 x21: 0000000000000003 x20: 1fffe000197be55b x19: 1fffe000197be540 x18: 0000000000000001 x17: 0000000000000000 x16: ffff8000111c8944 x15: 00000000ffffffff x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 x11: 0000000000000000 x10: 0000000000000000 x9 : f4e36b38ef321000 x8 : f4e36b38ef321000 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001be671f8 x4 : ffff80001425f420 x3 : ffff80000850471c x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002e Call trace: release_gid_table drivers/infiniband/core/cache.c:806 [inline] gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 ib_cache_release_one+0x144/0x174 drivers/infiniband/core/cache.c:1648 ib_device_release+0xc4/0x18c drivers/infiniband/core/device.c:497 device_release+0x8c/0x1ac drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:713 [inline] kobject_release lib/kobject.c:744 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x2cc/0x454 lib/kobject.c:761 put_device+0x28/0x40 drivers/base/core.c:3520 ib_unregister_work+0x28/0x38 drivers/infiniband/core/device.c:1595 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 irq event stamp: 777808 hardirqs last enabled at (777807): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (777808): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (775162): [] softirq_handle_end kernel/softirq.c:419 [inline] softirqs last enabled at (775162): [] handle_softirqs+0xa4c/0xbf0 kernel/softirq.c:604 softirqs last disabled at (775127): [] __do_softirq kernel/softirq.c:610 [inline] softirqs last disabled at (775127): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (775127): [] invoke_softirq kernel/softirq.c:457 [inline] softirqs last disabled at (775127): [] __irq_exit_rcu+0x240/0x440 kernel/softirq.c:659 ---[ end trace d1d9a1f20bb42255 ]--- IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready bridge0: port 1(bridge_slave_0) entered blocking state bridge0: port 1(bridge_slave_0) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready bridge0: port 2(bridge_slave_1) entered blocking state bridge0: port 2(bridge_slave_1) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready