================================================================== BUG: KASAN: use-after-free in netdev_need_ops_lock include/net/netdev_lock.h:30 [inline] BUG: KASAN: use-after-free in netdev_unlock_ops include/net/netdev_lock.h:47 [inline] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x4e4/0x7f8 net/core/link_watch.c:245 Read of size 8 at addr ffff0000f7774b88 by task kworker/u8:6/2209 CPU: 0 UID: 0 PID: 2209 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Workqueue: events_unbound linkwatch_event Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 print_address_description+0xa8/0x238 mm/kasan/report.c:378 print_report+0x68/0x84 mm/kasan/report.c:482 kasan_report+0xb0/0x110 mm/kasan/report.c:595 __asan_report_load8_noabort+0x20/0x2c mm/kasan/report_generic.c:381 netdev_need_ops_lock include/net/netdev_lock.h:30 [inline] netdev_unlock_ops include/net/netdev_lock.h:47 [inline] __linkwatch_run_queue+0x4e4/0x7f8 net/core/link_watch.c:245 linkwatch_event+0x58/0x68 net/core/link_watch.c:304 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000f7777a80 pfn:0x137774 flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000000000 fffffdffc3dddc08 ffff00019bbcd680 0000000000000000 raw: ffff0000f7777a80 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff0000f7774a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff0000f7774b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff0000f7774b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff0000f7774c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff0000f7774c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================