Subject: Re: [PATCH net v2] ipv6: anycast: insert aca into global hash under idev->lock

From: Jakub Kicinski <[email-masked]>
Date: Fri, 29 May 2026 13:51:16 -0700

On Fri, 29 May 2026 23:22:18 +0800 Jiayuan Chen wrote:
> syzbot reported a splat [1]: a slab-use-after-free in
> ipv6_chk_acast_addr(), which walks the global inet6_acaddr_lst[] hash
> under RCU and dereferences a struct ifacaddr6 that has already been
> freed while still linked in the hash, so a later reader walks into a
> dangling node.

Please do not violate the 24h repost grace period on netdev.
We are tracking the violations now, if you keep doing this 
there will be consequences..