==================================================================
BUG: KASAN: invalid-access in __ethtool_get_link_ksettings+0x20/0xb4 net/ethtool/ioctl.c:440
Read at addr f8f000000cebc2e8 by task kworker/0:0/9
Pointer tag: [f8], memory tag: [fe]

CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0
Hardware name: linux,dummy-virt (DT)
Workqueue: events smc_ib_port_event_work
Call trace:
 show_stack+0x18/0x24 arch/arm64/kernel/stacktrace.c:466 (C)
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x78/0x90 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0x108/0x630 mm/kasan/report.c:521
 kasan_report+0x88/0xac mm/kasan/report.c:634
 report_tag_fault arch/arm64/mm/fault.c:332 [inline]
 do_tag_recovery arch/arm64/mm/fault.c:344 [inline]
 __do_kernel_fault+0x170/0x1c8 arch/arm64/mm/fault.c:386
 do_bad_area arch/arm64/mm/fault.c:486 [inline]
 do_tag_check_fault+0x78/0x8c arch/arm64/mm/fault.c:843
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:919
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:432
 el1h_64_sync_handler+0xa4/0x120 arch/arm64/kernel/entry-common.c:510
 el1h_64_sync+0x6c/0x70 arch/arm64/kernel/entry.S:595
 __ethtool_get_link_ksettings+0x20/0xb4 net/ethtool/ioctl.c:440 (P)
 ipvlan_ethtool_get_link_ksettings+0x14/0x20 drivers/net/ipvlan/ipvlan_main.c:410
 __ethtool_get_link_ksettings+0x5c/0xb4 net/ethtool/ioctl.c:449
 ib_get_eth_speed+0x84/0x354 drivers/infiniband/core/verbs.c:1996
 rxe_query_port+0xf8/0x1b4 drivers/infiniband/sw/rxe/rxe_verbs.c:62
 __ib_query_port drivers/infiniband/core/device.c:2095 [inline]
 ib_query_port drivers/infiniband/core/device.c:2127 [inline]
 ib_query_port+0x150/0x200 drivers/infiniband/core/device.c:2117
 smc_ib_remember_port_attr net/smc/smc_ib.c:364 [inline]
 smc_ib_port_event_work+0x98/0x3cc net/smc/smc_ib.c:388
 process_one_work+0x178/0x2cc kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x250/0x358 kernel/workqueue.c:3400
 kthread+0x130/0x1fc kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000223 pfn:0x4cebc
flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0)
raw: 01ffc00000000000 0000000000000000 dead000000000122 0000000000000000
raw: 0000000200000223 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 fff000000cebc000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
 fff000000cebc100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
>fff000000cebc200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
                                                             ^
 fff000000cebc300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
 fff000000cebc400: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
==================================================================