syzbot |
sign-in | mailing list | source | docs |
| Kernel | Title | Rank 🛈 | Repro | Cause bisect | Fix bisect | Count | Last | Reported | Patched | Status |
|---|---|---|---|---|---|---|---|---|---|---|
| linux-6.6 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | 19 | 1 | 131d | 131d | 0/2 | auto-obsoleted due to no activity on 2025/10/05 22:34 | |||
| linux-6.1 | KASAN: use-after-free Read in __ethtool_get_link_ksettings | 19 | 7 | 407d | 541d | 0/3 | auto-obsoleted due to no activity on 2025/01/02 21:40 | |||
| upstream | KASAN: use-after-free Read in __ethtool_get_link_ksettings net | 19 | 2 | 1308d | 1345d | 0/29 | auto-closed as invalid on 2022/07/07 00:01 | |||
| upstream | general protection fault in __ethtool_get_link_ksettings net | 7 | C | error | unreliable | 298 | 1576d | 1735d | 0/29 | closed as invalid on 2021/10/06 01:39 |
| upstream | KASAN: use-after-free Read in __ethtool_get_link_ksettings (2) net | 19 | 1 | 1202d | 1197d | 0/29 | auto-obsoleted due to no activity on 2022/11/20 15:32 |
================================================================== BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1bf/0x200 net/ethtool/ioctl.c:443 Read of size 8 at addr ffff88802f70a2e8 by task kworker/0:1/10 CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events smc_ib_port_event_work Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 __ethtool_get_link_ksettings+0x1bf/0x200 net/ethtool/ioctl.c:443 __ethtool_get_link_ksettings+0x148/0x200 net/ethtool/ioctl.c:450 ib_get_eth_speed+0x122/0xb50 drivers/infiniband/core/verbs.c:1996 rxe_query_port+0x108/0x330 drivers/infiniband/sw/rxe/rxe_verbs.c:62 __ib_query_port drivers/infiniband/core/device.c:2148 [inline] ib_query_port drivers/infiniband/core/device.c:2180 [inline] ib_query_port+0x441/0x8a0 drivers/infiniband/core/device.c:2170 smc_ib_remember_port_attr net/smc/smc_ib.c:364 [inline] smc_ib_port_event_work+0x12f/0xbf0 net/smc/smc_ib.c:388 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 11440: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:262 [inline] __do_kmalloc_node mm/slub.c:5627 [inline] __kvmalloc_node_noprof+0x3a3/0x9c0 mm/slub.c:7081 alloc_netdev_mqs+0xd7/0x1550 net/core/dev.c:11900 rtnl_create_link+0xc08/0xf90 net/core/rtnetlink.c:3641 rtnl_newlink_create net/core/rtnetlink.c:3823 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xb69/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x4a3/0x520 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2247 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 1322: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2523 [inline] slab_free mm/slub.c:6611 [inline] kfree+0x2b8/0x6d0 mm/slub.c:6818 device_release+0xa4/0x240 drivers/base/core.c:2565 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1e7/0x5a0 lib/kobject.c:737 netdev_run_todo+0x7e9/0x1320 net/core/dev.c:11601 default_device_exit_batch+0x858/0xaf0 net/core/dev.c:12822 ops_exit_list net/core/net_namespace.c:205 [inline] ops_undo_list+0x363/0xab0 net/core/net_namespace.c:252 cleanup_net+0x41b/0x8b0 net/core/net_namespace.c:695 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88802f70a000 which belongs to the cache kmalloc-cg-4k of size 4096 The buggy address is located 744 bytes inside of freed 4096-byte region [ffff88802f70a000, ffff88802f70b000) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f708000 pfn:0x2f708 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff8880327a1d01 flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000240 ffff88813ffb0500 ffffea0000c20210 ffffea0001823810 raw: ffff88802f708000 0000000000040003 00000000f5000000 ffff8880327a1d01 head: 00fff00000000240 ffff88813ffb0500 ffffea0000c20210 ffffea0001823810 head: ffff88802f708000 0000000000040003 00000000f5000000 ffff8880327a1d01 head: 00fff00000000003 ffffea0000bdc201 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5978, tgid 5978 (syz-executor), ts 177598196873, free_ts 177438999193 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850 prep_new_page mm/page_alloc.c:1858 [inline] get_page_from_freelist+0x10a3/0x3a30 mm/page_alloc.c:3884 __alloc_frozen_pages_noprof+0x25f/0x2470 mm/page_alloc.c:5183 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416 alloc_slab_page mm/slub.c:3039 [inline] allocate_slab mm/slub.c:3212 [inline] new_slab+0x24a/0x360 mm/slub.c:3266 ___slab_alloc+0xdc4/0x1ae0 mm/slub.c:4636 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4755 __slab_alloc_node mm/slub.c:4831 [inline] slab_alloc_node mm/slub.c:5253 [inline] __do_kmalloc_node mm/slub.c:5626 [inline] __kmalloc_noprof+0x501/0x880 mm/slub.c:5639 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] __register_sysctl_table+0xb3/0x1900 fs/proc/proc_sysctl.c:1379 __addrconf_sysctl_register+0x1a2/0x360 net/ipv6/addrconf.c:7323 addrconf_sysctl_register net/ipv6/addrconf.c:7371 [inline] addrconf_sysctl_register+0x15f/0x1f0 net/ipv6/addrconf.c:7360 ipv6_add_dev+0xb31/0x15f0 net/ipv6/addrconf.c:460 addrconf_notify+0x53e/0x19e0 net/ipv6/addrconf.c:3650 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 page last free pid 5962 tgid 5962 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0x7df/0x1160 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x130/0x170 mm/slub.c:3857 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] __kmalloc_cache_noprof+0x274/0x780 mm/slub.c:5743 kmalloc_noprof include/linux/slab.h:957 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ref_tracker_alloc+0x18e/0x5b0 lib/ref_tracker.c:271 __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] netdev_hold include/linux/netdevice.h:4399 [inline] inetdev_init+0x245/0x5a0 net/ipv4/devinet.c:286 inetdev_event+0xc5f/0x18a0 net/ipv4/devinet.c:1590 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 veth_newlink+0x316/0xa00 drivers/net/veth.c:1855 rtnl_newlink_create net/core/rtnetlink.c:3833 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xc45/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 Memory state around the buggy address: ffff88802f70a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802f70a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff88802f70a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88802f70a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802f70a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== ================================================================== BUG: KASAN: slab-use-after-free in instrument_atomic_read include/linux/instrumented.h:68 [inline] BUG: KASAN: slab-use-after-free in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] BUG: KASAN: slab-use-after-free in netif_device_present include/linux/netdevice.h:4601 [inline] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0xa4/0x200 net/ethtool/ioctl.c:446 Read of size 8 at addr ffff88802f70a0a8 by task kworker/0:1/10 CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B syzkaller #0 PREEMPT(full) Tainted: [B]=BAD_PAGE Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events smc_ib_port_event_work Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 check_region_inline mm/kasan/generic.c:194 [inline] kasan_check_range+0x100/0x1b0 mm/kasan/generic.c:200 instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] netif_device_present include/linux/netdevice.h:4601 [inline] __ethtool_get_link_ksettings+0xa4/0x200 net/ethtool/ioctl.c:446 __ethtool_get_link_ksettings+0x148/0x200 net/ethtool/ioctl.c:450 ib_get_eth_speed+0x122/0xb50 drivers/infiniband/core/verbs.c:1996 rxe_query_port+0x108/0x330 drivers/infiniband/sw/rxe/rxe_verbs.c:62 __ib_query_port drivers/infiniband/core/device.c:2148 [inline] ib_query_port drivers/infiniband/core/device.c:2180 [inline] ib_query_port+0x441/0x8a0 drivers/infiniband/core/device.c:2170 smc_ib_remember_port_attr net/smc/smc_ib.c:364 [inline] smc_ib_port_event_work+0x12f/0xbf0 net/smc/smc_ib.c:388 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 11440: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:262 [inline] __do_kmalloc_node mm/slub.c:5627 [inline] __kvmalloc_node_noprof+0x3a3/0x9c0 mm/slub.c:7081 alloc_netdev_mqs+0xd7/0x1550 net/core/dev.c:11900 rtnl_create_link+0xc08/0xf90 net/core/rtnetlink.c:3641 rtnl_newlink_create net/core/rtnetlink.c:3823 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xb69/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x4a3/0x520 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2247 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 1322: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2523 [inline] slab_free mm/slub.c:6611 [inline] kfree+0x2b8/0x6d0 mm/slub.c:6818 device_release+0xa4/0x240 drivers/base/core.c:2565 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1e7/0x5a0 lib/kobject.c:737 netdev_run_todo+0x7e9/0x1320 net/core/dev.c:11601 default_device_exit_batch+0x858/0xaf0 net/core/dev.c:12822 ops_exit_list net/core/net_namespace.c:205 [inline] ops_undo_list+0x363/0xab0 net/core/net_namespace.c:252 cleanup_net+0x41b/0x8b0 net/core/net_namespace.c:695 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88802f70a000 which belongs to the cache kmalloc-cg-4k of size 4096 The buggy address is located 168 bytes inside of freed 4096-byte region [ffff88802f70a000, ffff88802f70b000) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f708 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff8880327a1d01 anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88813ffb0500 0000000000000000 dead000000000001 raw: 0000000000000000 0000000000040004 00000000f5000000 ffff8880327a1d01 head: 00fff00000000040 ffff88813ffb0500 0000000000000000 dead000000000001 head: 0000000000000000 0000000000040004 00000000f5000000 ffff8880327a1d01 head: 00fff00000000003 ffffea0000bdc201 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5978, tgid 5978 (syz-executor), ts 177598196873, free_ts 177438999193 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850 prep_new_page mm/page_alloc.c:1858 [inline] get_page_from_freelist+0x10a3/0x3a30 mm/page_alloc.c:3884 __alloc_frozen_pages_noprof+0x25f/0x2470 mm/page_alloc.c:5183 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416 alloc_slab_page mm/slub.c:3039 [inline] allocate_slab mm/slub.c:3212 [inline] new_slab+0x24a/0x360 mm/slub.c:3266 ___slab_alloc+0xdc4/0x1ae0 mm/slub.c:4636 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4755 __slab_alloc_node mm/slub.c:4831 [inline] slab_alloc_node mm/slub.c:5253 [inline] __do_kmalloc_node mm/slub.c:5626 [inline] __kmalloc_noprof+0x501/0x880 mm/slub.c:5639 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] __register_sysctl_table+0xb3/0x1900 fs/proc/proc_sysctl.c:1379 __addrconf_sysctl_register+0x1a2/0x360 net/ipv6/addrconf.c:7323 addrconf_sysctl_register net/ipv6/addrconf.c:7371 [inline] addrconf_sysctl_register+0x15f/0x1f0 net/ipv6/addrconf.c:7360 ipv6_add_dev+0xb31/0x15f0 net/ipv6/addrconf.c:460 addrconf_notify+0x53e/0x19e0 net/ipv6/addrconf.c:3650 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 page last free pid 5962 tgid 5962 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0x7df/0x1160 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x130/0x170 mm/slub.c:3857 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] __kmalloc_cache_noprof+0x274/0x780 mm/slub.c:5743 kmalloc_noprof include/linux/slab.h:957 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ref_tracker_alloc+0x18e/0x5b0 lib/ref_tracker.c:271 __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] netdev_hold include/linux/netdevice.h:4399 [inline] inetdev_init+0x245/0x5a0 net/ipv4/devinet.c:286 inetdev_event+0xc5f/0x18a0 net/ipv4/devinet.c:1590 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 veth_newlink+0x316/0xa00 drivers/net/veth.c:1855 rtnl_newlink_create net/core/rtnetlink.c:3833 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xc45/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 Memory state around the buggy address: ffff88802f709f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88802f70a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff88802f70a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88802f70a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802f70a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== ================================================================== BUG: KASAN: slab-use-after-free in constant_test_bit arch/x86/include/asm/bitops.h:202 [inline] BUG: KASAN: slab-use-after-free in arch_test_bit arch/x86/include/asm/bitops.h:232 [inline] BUG: KASAN: slab-use-after-free in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline] BUG: KASAN: slab-use-after-free in netif_device_present include/linux/netdevice.h:4601 [inline] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1cc/0x200 net/ethtool/ioctl.c:446 Read of size 8 at addr ffff88802f70a0a8 by task kworker/0:1/10 CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B syzkaller #0 PREEMPT(full) Tainted: [B]=BAD_PAGE Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events smc_ib_port_event_work Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 constant_test_bit arch/x86/include/asm/bitops.h:202 [inline] arch_test_bit arch/x86/include/asm/bitops.h:232 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline] netif_device_present include/linux/netdevice.h:4601 [inline] __ethtool_get_link_ksettings+0x1cc/0x200 net/ethtool/ioctl.c:446 __ethtool_get_link_ksettings+0x148/0x200 net/ethtool/ioctl.c:450 ib_get_eth_speed+0x122/0xb50 drivers/infiniband/core/verbs.c:1996 rxe_query_port+0x108/0x330 drivers/infiniband/sw/rxe/rxe_verbs.c:62 __ib_query_port drivers/infiniband/core/device.c:2148 [inline] ib_query_port drivers/infiniband/core/device.c:2180 [inline] ib_query_port+0x441/0x8a0 drivers/infiniband/core/device.c:2170 smc_ib_remember_port_attr net/smc/smc_ib.c:364 [inline] smc_ib_port_event_work+0x12f/0xbf0 net/smc/smc_ib.c:388 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 11440: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:262 [inline] __do_kmalloc_node mm/slub.c:5627 [inline] __kvmalloc_node_noprof+0x3a3/0x9c0 mm/slub.c:7081 alloc_netdev_mqs+0xd7/0x1550 net/core/dev.c:11900 rtnl_create_link+0xc08/0xf90 net/core/rtnetlink.c:3641 rtnl_newlink_create net/core/rtnetlink.c:3823 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xb69/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x4a3/0x520 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2247 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 1322: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2523 [inline] slab_free mm/slub.c:6611 [inline] kfree+0x2b8/0x6d0 mm/slub.c:6818 device_release+0xa4/0x240 drivers/base/core.c:2565 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1e7/0x5a0 lib/kobject.c:737 netdev_run_todo+0x7e9/0x1320 net/core/dev.c:11601 default_device_exit_batch+0x858/0xaf0 net/core/dev.c:12822 ops_exit_list net/core/net_namespace.c:205 [inline] ops_undo_list+0x363/0xab0 net/core/net_namespace.c:252 cleanup_net+0x41b/0x8b0 net/core/net_namespace.c:695 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88802f70a000 which belongs to the cache kmalloc-cg-4k of size 4096 The buggy address is located 168 bytes inside of freed 4096-byte region [ffff88802f70a000, ffff88802f70b000) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f708 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff8880327a1d01 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88813ffb0500 ffffea0001e8c800 dead000000000002 raw: 0000000000000000 0000000000040004 00000000f5000000 ffff8880327a1d01 head: 00fff00000000040 ffff88813ffb0500 ffffea0001e8c800 dead000000000002 head: 0000000000000000 0000000000040004 00000000f5000000 ffff8880327a1d01 head: 00fff00000000003 ffffea0000bdc201 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5978, tgid 5978 (syz-executor), ts 177598196873, free_ts 177438999193 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850 prep_new_page mm/page_alloc.c:1858 [inline] get_page_from_freelist+0x10a3/0x3a30 mm/page_alloc.c:3884 __alloc_frozen_pages_noprof+0x25f/0x2470 mm/page_alloc.c:5183 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416 alloc_slab_page mm/slub.c:3039 [inline] allocate_slab mm/slub.c:3212 [inline] new_slab+0x24a/0x360 mm/slub.c:3266 ___slab_alloc+0xdc4/0x1ae0 mm/slub.c:4636 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4755 __slab_alloc_node mm/slub.c:4831 [inline] slab_alloc_node mm/slub.c:5253 [inline] __do_kmalloc_node mm/slub.c:5626 [inline] __kmalloc_noprof+0x501/0x880 mm/slub.c:5639 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] __register_sysctl_table+0xb3/0x1900 fs/proc/proc_sysctl.c:1379 __addrconf_sysctl_register+0x1a2/0x360 net/ipv6/addrconf.c:7323 addrconf_sysctl_register net/ipv6/addrconf.c:7371 [inline] addrconf_sysctl_register+0x15f/0x1f0 net/ipv6/addrconf.c:7360 ipv6_add_dev+0xb31/0x15f0 net/ipv6/addrconf.c:460 addrconf_notify+0x53e/0x19e0 net/ipv6/addrconf.c:3650 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 page last free pid 5962 tgid 5962 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0x7df/0x1160 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x130/0x170 mm/slub.c:3857 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] __kmalloc_cache_noprof+0x274/0x780 mm/slub.c:5743 kmalloc_noprof include/linux/slab.h:957 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ref_tracker_alloc+0x18e/0x5b0 lib/ref_tracker.c:271 __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] netdev_hold include/linux/netdevice.h:4399 [inline] inetdev_init+0x245/0x5a0 net/ipv4/devinet.c:286 inetdev_event+0xc5f/0x18a0 net/ipv4/devinet.c:1590 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 veth_newlink+0x316/0xa00 drivers/net/veth.c:1855 rtnl_newlink_create net/core/rtnetlink.c:3833 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xc45/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 Memory state around the buggy address: ffff88802f709f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88802f70a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff88802f70a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88802f70a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802f70a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== ================================================================== BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1e3/0x200 net/ethtool/ioctl.c:450 Read of size 8 at addr ffff88802f70a2e8 by task kworker/0:1/10 CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B syzkaller #0 PREEMPT(full) Tainted: [B]=BAD_PAGE Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events smc_ib_port_event_work Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 __ethtool_get_link_ksettings+0x1e3/0x200 net/ethtool/ioctl.c:450 __ethtool_get_link_ksettings+0x148/0x200 net/ethtool/ioctl.c:450 ib_get_eth_speed+0x122/0xb50 drivers/infiniband/core/verbs.c:1996 rxe_query_port+0x108/0x330 drivers/infiniband/sw/rxe/rxe_verbs.c:62 __ib_query_port drivers/infiniband/core/device.c:2148 [inline] ib_query_port drivers/infiniband/core/device.c:2180 [inline] ib_query_port+0x441/0x8a0 drivers/infiniband/core/device.c:2170 smc_ib_remember_port_attr net/smc/smc_ib.c:364 [inline] smc_ib_port_event_work+0x12f/0xbf0 net/smc/smc_ib.c:388 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 11440: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:262 [inline] __do_kmalloc_node mm/slub.c:5627 [inline] __kvmalloc_node_noprof+0x3a3/0x9c0 mm/slub.c:7081 alloc_netdev_mqs+0xd7/0x1550 net/core/dev.c:11900 rtnl_create_link+0xc08/0xf90 net/core/rtnetlink.c:3641 rtnl_newlink_create net/core/rtnetlink.c:3823 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xb69/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x4a3/0x520 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2247 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 1322: kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2523 [inline] slab_free mm/slub.c:6611 [inline] kfree+0x2b8/0x6d0 mm/slub.c:6818 device_release+0xa4/0x240 drivers/base/core.c:2565 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1e7/0x5a0 lib/kobject.c:737 netdev_run_todo+0x7e9/0x1320 net/core/dev.c:11601 default_device_exit_batch+0x858/0xaf0 net/core/dev.c:12822 ops_exit_list net/core/net_namespace.c:205 [inline] ops_undo_list+0x363/0xab0 net/core/net_namespace.c:252 cleanup_net+0x41b/0x8b0 net/core/net_namespace.c:695 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88802f70a000 which belongs to the cache kmalloc-cg-4k of size 4096 The buggy address is located 744 bytes inside of freed 4096-byte region [ffff88802f70a000, ffff88802f70b000) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f708 head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff8880327a1d01 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88813ffb0500 ffffea0001e8c800 dead000000000002 raw: 0000000000000000 0000000000040004 00000000f5000000 ffff8880327a1d01 head: 00fff00000000040 ffff88813ffb0500 ffffea0001e8c800 dead000000000002 head: 0000000000000000 0000000000040004 00000000f5000000 ffff8880327a1d01 head: 00fff00000000003 ffffea0000bdc201 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5978, tgid 5978 (syz-executor), ts 177598196873, free_ts 177438999193 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850 prep_new_page mm/page_alloc.c:1858 [inline] get_page_from_freelist+0x10a3/0x3a30 mm/page_alloc.c:3884 __alloc_frozen_pages_noprof+0x25f/0x2470 mm/page_alloc.c:5183 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416 alloc_slab_page mm/slub.c:3039 [inline] allocate_slab mm/slub.c:3212 [inline] new_slab+0x24a/0x360 mm/slub.c:3266 ___slab_alloc+0xdc4/0x1ae0 mm/slub.c:4636 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4755 __slab_alloc_node mm/slub.c:4831 [inline] slab_alloc_node mm/slub.c:5253 [inline] __do_kmalloc_node mm/slub.c:5626 [inline] __kmalloc_noprof+0x501/0x880 mm/slub.c:5639 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] __register_sysctl_table+0xb3/0x1900 fs/proc/proc_sysctl.c:1379 __addrconf_sysctl_register+0x1a2/0x360 net/ipv6/addrconf.c:7323 addrconf_sysctl_register net/ipv6/addrconf.c:7371 [inline] addrconf_sysctl_register+0x15f/0x1f0 net/ipv6/addrconf.c:7360 ipv6_add_dev+0xb31/0x15f0 net/ipv6/addrconf.c:460 addrconf_notify+0x53e/0x19e0 net/ipv6/addrconf.c:3650 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 page last free pid 5962 tgid 5962 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0x7df/0x1160 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x130/0x170 mm/slub.c:3857 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] __kmalloc_cache_noprof+0x274/0x780 mm/slub.c:5743 kmalloc_noprof include/linux/slab.h:957 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ref_tracker_alloc+0x18e/0x5b0 lib/ref_tracker.c:271 __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] netdev_hold include/linux/netdevice.h:4399 [inline] inetdev_init+0x245/0x5a0 net/ipv4/devinet.c:286 inetdev_event+0xc5f/0x18a0 net/ipv4/devinet.c:1590 notifier_call_chain+0xbc/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] register_netdevice+0x182e/0x2270 net/core/dev.c:11332 veth_newlink+0x316/0xa00 drivers/net/veth.c:1855 rtnl_newlink_create net/core/rtnetlink.c:3833 [inline] __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0xc45/0x2000 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6954 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 Memory state around the buggy address: ffff88802f70a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802f70a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff88802f70a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88802f70a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802f70a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================
| Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2025/10/16 16:49 | upstream | 7ea30958b305 | 19568248 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-badwrites-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/08/21 17:09 | upstream | 038d61fd6422 | 0b9605c8 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/12 18:36 | upstream | 67029a49db6c | ff1712fe | .config | console log | report | syz / log | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/04 12:37 | upstream | b9a10f876409 | d291dd2d | .config | console log | report | syz / log | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-snapshot-upstream-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 12:26 | bpf | 44e8f13f07cf | a6c9c731 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/02 10:51 | net | d7d2fcf7ae31 | 2c50b6a9 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/31 06:54 | bpf | 2cbb259ec4f8 | 2c50b6a9 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/28 21:11 | bpf | 8ce93aabbf75 | fd2207e7 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/25 21:32 | net | 84a905290cb4 | c0460fcd | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/23 12:05 | bpf | 881a9c9cb785 | c0460fcd | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/23 02:11 | net | d63f0391d6c7 | c0460fcd | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/18 20:53 | bpf | a1e83d4c0361 | 1c8c8cd8 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/14 07:17 | bpf | 3a8660878839 | b6605ba8 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/11 15:18 | net | f3426ac54c42 | ff1712fe | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/30 15:42 | net | 2aff4420efc2 | 65a0eece | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/29 08:33 | net | 012ea489aeda | 001c9061 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/28 15:02 | bpf | bf40f4b87761 | 001c9061 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/18 19:40 | net | 4c05c7ed880f | e2beed91 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/16 20:00 | bpf | f36caa7c14f4 | e2beed91 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/10 07:38 | bpf | 3753d4f6d9d7 | fdeaa69b | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/09 12:12 | net | 1dbfb0363224 | d291dd2d | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/01 02:59 | net | 788bc43d8330 | 807a3b61 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/08/23 21:37 | net | ec79003c5f9d | bf27483f | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2024/10/20 09:25 | net | 07d6bf634bc8 | cd6fc0a3 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2024/10/02 22:08 | net | c4a14f6d9d17 | a4c7fd36 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2024/09/27 18:25 | net | d505d3593b52 | 2b1784d6 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/02 19:42 | bpf-next | ab01bfad61b0 | 2c50b6a9 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/01 05:20 | bpf-next | ab01bfad61b0 | 2c50b6a9 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/29 12:36 | bpf-next | 54c134f379ee | fd2207e7 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/27 01:54 | net-next | bfe62db5422b | c0460fcd | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/13 23:07 | net-next | 18a7e218cfcd | b6605ba8 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/21 22:33 | bpf-next | 5a427fddec5e | 67c37560 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/19 15:14 | bpf-next | 8cd189e414bb | 67c37560 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/17 00:10 | net-next | 29fa7f9e5adf | e2beed91 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/08 14:05 | bpf-next | e12873ee856f | d291dd2d | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/07 08:16 | net-next | c6142e1913de | d291dd2d | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/08/23 18:56 | net-next | b1c92cdf5af3 | bf27483f | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/23 03:33 | linux-next | aaa9c3550b60 | c0460fcd | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-rust-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/10 11:44 | linux-next | 5f540c4aade9 | fdeaa69b | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-rust-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/01 14:06 | linux-next | 7fa4d8dc380f | 807a3b61 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-rust-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/08/21 21:49 | linux-next | 7fa4d8dc380f | 0b9605c8 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-rust-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/06 06:59 | git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci | bf45a62baffc | 49379ee0 | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-gce-arm64 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/11 08:47 | git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci | c199ef1fa61a | fdeaa69b | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-gce-arm64 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/07 11:30 | git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci | b320789d6883 | d291dd2d | .config | console log | report | syz / log | [disk image] [vmlinux] [kernel image] | ci-upstream-gce-arm64 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 17:18 | upstream | dc77806cf3b4 | 4e1406b4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-selinux-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 10:20 | upstream | dc77806cf3b4 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-badwrites-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 08:49 | upstream | dc77806cf3b4 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-selinux-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 04:16 | upstream | dc77806cf3b4 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-selinux-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 16:26 | upstream | 1c353dc8d962 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 14:39 | upstream | 1c353dc8d962 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-smack-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 13:31 | upstream | 1c353dc8d962 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-selinux-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 09:49 | upstream | c9cfc122f037 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-selinux-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 23:17 | upstream | c9cfc122f037 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-selinux-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 19:40 | upstream | c9cfc122f037 | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/03 20:22 | upstream | 6146a0f1dfae | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-selinux-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2024/03/13 22:25 | upstream | 61387b8dcf1d | f919f202 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-badwrites-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/27 20:29 | upstream | dcb6fa37fd7b | fd2207e7 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 19:04 | upstream | 284922f4c563 | a6c9c731 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 02:42 | upstream | c9cfc122f037 | a6c9c731 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 20:40 | upstream | c9cfc122f037 | a6c9c731 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 17:41 | upstream | c9cfc122f037 | e6c64ba8 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 15:07 | upstream | c9cfc122f037 | e6c64ba8 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 01:28 | upstream | 8bb886cb8f3a | e6c64ba8 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/03 21:28 | upstream | 6146a0f1dfae | e6c64ba8 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/03 21:28 | upstream | 6146a0f1dfae | e6c64ba8 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream-386 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/25 22:44 | upstream | bf40f4b87761 | 0abd0691 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu2-arm64 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/10 05:48 | upstream | 9dd1835ecda5 | fdeaa69b | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu2-arm64-compat | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/09/09 07:21 | upstream | f777d1112ee5 | d291dd2d | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu2-arm64-mte | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2024/01/16 11:52 | upstream | 052d534373b7 | 2a7bcc7f | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu2-arm64-compat | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2024/01/14 06:32 | upstream | 052d534373b7 | 551587c1 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu2-arm64-compat | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 14:07 | bpf | e427054ae7bc | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 12:48 | bpf | e427054ae7bc | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 17:27 | bpf | 44e8f13f07cf | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 08:44 | net | e120f46768d9 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 07:11 | net | e120f46768d9 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 06:05 | bpf | 44e8f13f07cf | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 01:40 | net | e120f46768d9 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 00:59 | net | e120f46768d9 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 22:09 | bpf | 156c75f596c9 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 12:29 | net | 99ae0675d73b | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 07:02 | net | 99ae0675d73b | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 05:51 | net | 99ae0675d73b | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 01:59 | net | d7d2fcf7ae31 | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/03 23:51 | net | d7d2fcf7ae31 | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/03 22:44 | net | d7d2fcf7ae31 | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 19:12 | net-next | 13068e9d5726 | 4e1406b4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 18:09 | bpf-next | b54a8e130c02 | 4e1406b4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 15:58 | bpf-next | b54a8e130c02 | 4e1406b4 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 06:31 | bpf-next | b54a8e130c02 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 05:13 | net-next | c79a02252457 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 01:21 | bpf-next | 4cb4897bb49a | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 19:03 | bpf-next | 4cb4897bb49a | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 11:11 | bpf-next | b3387b312226 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 04:56 | bpf-next | b3387b312226 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 19:09 | bpf-next | 11369e6e337a | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 16:40 | bpf-next | 11369e6e337a | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 13:56 | bpf-next | 11369e6e337a | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 10:09 | bpf-next | e6e10c51fb17 | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 08:58 | bpf-next | e6e10c51fb17 | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 08:20 | bpf-next | e6e10c51fb17 | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/04 04:05 | bpf-next | e6e10c51fb17 | 686bf657 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-bpf-next-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/03 19:18 | net-next | 01cc760632b8 | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/06 00:01 | linux-next | 84d39fb9d529 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-linux-next-kasan-gce-root | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/05 22:24 | linux-next | 84d39fb9d529 | a6c9c731 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-rust-kasan-gce | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/11/02 21:05 | git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci | dcb6fa37fd7b | 2c50b6a9 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-gce-arm64 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/10/06 03:47 | git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git for-next | 68247d45c045 | 49379ee0 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu2-riscv64 | KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/08/16 12:25 | upstream | dfd4b508c8c6 | 1804e95e | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-kasan-gce-root | KFENCE: use-after-free read in __ethtool_get_link_ksettings | ||
| 2025/10/11 02:25 | upstream | 917167ed1211 | ff1712fe | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu-upstream | KASAN: use-after-free Read in __ethtool_get_link_ksettings | ||
| 2025/05/13 04:13 | upstream | 627277ba7c23 | f6671af7 | .config | console log | report | info | [disk image (non-bootable)] [vmlinux] [kernel image] | ci-qemu2-arm64-mte | KASAN: invalid-access Read in __ethtool_get_link_ksettings | ||
| 2025/10/16 16:37 | net | 8d93ff40d49d | 19568248 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | general protection fault in __ethtool_get_link_ksettings | ||
| 2025/06/30 22:51 | net | 60f7f4afaf6d | 6e83b42d | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-this-kasan-gce | KFENCE: use-after-free in __ethtool_get_link_ksettings | ||
| 2025/10/29 09:07 | net-next | a8abe8e210c1 | fd2207e7 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci-upstream-net-kasan-gce | KASAN: slab-out-of-bounds Read in __ethtool_get_link_ksettings |