wlan1 speed is unknown, defaulting to 1000 ================================================================== BUG: KASAN: use-after-free in siw_query_port+0x2f4/0x3d8 drivers/infiniband/sw/siw/siw_verbs.c:177 Read of size 4 at addr ffff0000cc08c0e0 by task kworker/0:2/1975 CPU: 0 PID: 1975 Comm: kworker/0:2 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Workqueue: infiniband ib_cache_event_task Call trace: dump_backtrace+0x1c0/0x1ec arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 print_address_description+0x88/0x218 mm/kasan/report.c:316 print_report+0x50/0x68 mm/kasan/report.c:420 kasan_report+0xa8/0xfc mm/kasan/report.c:524 __asan_report_load4_noabort+0x2c/0x38 mm/kasan/report_generic.c:350 siw_query_port+0x2f4/0x3d8 drivers/infiniband/sw/siw/siw_verbs.c:177 iw_query_port drivers/infiniband/core/device.c:2071 [inline] ib_query_port+0x5b4/0x744 drivers/infiniband/core/device.c:2112 ib_cache_update+0x170/0x85c drivers/infiniband/core/cache.c:1490 ib_cache_event_task+0xc0/0x1a8 drivers/infiniband/core/cache.c:1564 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 The buggy address belongs to the physical page: page:00000000d5ed2546 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c08c flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000000000 fffffc000389fc08 ffff00019f54aeb0 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff0000cc08bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff0000cc08c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff0000cc08c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff0000cc08c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff0000cc08c180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================