------------[ cut here ]------------ GID entry ref leak for dev syz1 index 2 ref=103 WARNING: CPU: 0 PID: 341 at drivers/infiniband/core/cache.c:809 release_gid_table drivers/infiniband/core/cache.c:806 [inline] WARNING: CPU: 0 PID: 341 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 Modules linked in: CPU: 0 UID: 0 PID: 341 Comm: kworker/u8:5 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: ib-unreg-wq ib_unregister_work pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : release_gid_table drivers/infiniband/core/cache.c:806 [inline] pc : gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 lr : release_gid_table drivers/infiniband/core/cache.c:806 [inline] lr : gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 sp : ffff80009b867860 x29: ffff80009b8678b0 x28: ffff0000d553b300 x27: ffff0000d33bc8d8 x26: ffff0000d33bc800 x25: 0000000000000010 x24: 0000000000000001 x23: ffff80009282b000 x22: dfff800000000000 x21: 0000000000000003 x20: 1fffe0001a67791b x19: 1fffe0001a677900 x18: 00000000ffffffff x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 x14: 1fffe0003386aae2 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60003386aae3 x10: 0000000000ff0100 x9 : 749201fabb40e200 x8 : 749201fabb40e200 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80009b8671b8 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: release_gid_table drivers/infiniband/core/cache.c:806 [inline] (P) gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 (P) ib_cache_release_one+0x144/0x174 drivers/infiniband/core/cache.c:1636 ib_device_release+0xc4/0x194 drivers/infiniband/core/device.c:482 device_release+0x8c/0x1ac drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x2b0/0x438 lib/kobject.c:737 put_device+0x28/0x40 drivers/base/core.c:3800 ib_unregister_work+0x28/0x38 drivers/infiniband/core/device.c:1631 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 irq event stamp: 1179440 hardirqs last enabled at (1179439): [] __up_console_sem kernel/printk/printk.c:344 [inline] hardirqs last enabled at (1179439): [] __console_unlock+0x70/0xc4 kernel/printk/printk.c:2885 hardirqs last disabled at (1179440): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (1177802): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (1177802): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (1177667): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed