Applied filters: Label=subsystems:net (drop)
Extra filters: [With Repro]

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit prio:high net	19	syz, C	error	error	33	257d	666d	0/29	never	ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
general protection fault in __ip6_del_rt_siblings net prio:normal	2				1	14d	12d	14/29	never	cdca92eddc02 ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()
WARNING: suspicious RCU usage in ip6_pkt_drop (2) net prio:high	4				1	4d09h	4d09h	2/29	never	xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
WARNING: suspicious RCU usage in xfrm_nlmsg_multicast prio:normal net	4	syz, C	error		163	2d23h	47d	2/29	never	xfrm: add missing RCU read lock in xfrm_send_migrate_state()
KASAN: slab-use-after-free Read in ipvlan_hard_header (5) prio:high net	19				2	15d	43d	28/29	never	e16e960d55a4 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
possible deadlock in xsk_diag_dump (3) bpf net prio:normal	4				6	16d	23d	21/29	never	a8455260b2e9 ipvlan: unregister upper devices outside pnodes_lock
KCSAN: data-race in advance_sched / netdev_set_num_tc (2) race:benign prio:low net	6				1	38d	35d	26/29	never	936c0870c44d Merge branch 'net-prevent-lockless-data-races-in-net_device-tc-structures'
memory leak in inet_create (3) prio:high net	3	syz, C			1	38d	38d	28/29	never	9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
memory leak in __vsock_create (2) prio:high net virt	3	syz, C			6	30d	145d	26/29	never	b8c899cf5e7b vsock: don't check the listener's sk_err in vsock_accept()
WARNING in virtio_transport_send_pkt_info (2) prio:high kvm net virt	-1	syz, C	error		4	48d	292d	5/29	never	5ab3b28c5b3b vsock/virtio: restore msg_iter on transmission failure
memory leak in l2tp_tunnel_create (2) prio:high net	3	syz, C			1	41d	40d	28/29	never	9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
WARNING: locking bug in tcp_tsq_handler prio:low net	4	syz			63	15h33m	23d	21/29	never	02c6be7d675b locking/lockdep: Invalidate stale class_cache entries for zapped classes
kernel BUG in sock_sendmsg_nosec net prio:normal	-1	syz, C			2	16d	17d	21/29	never	73e594c19b4f af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
WARNING in __dev_queue_xmit (6) prio:low net	-1	syz, C	error		56	4d03h	37d	28/29	never	6bcd76c134c5 af_packet: Don't send zero-byte data in tpacket_snd().
UBSAN: shift-out-of-bounds in vcc_connect net usb prio:high	-1	syz			4	24d	24d	22/29	never	a60fd8c6dbaa usb: atm: usbatm: fix invalid ci_range initialization
WARNING in vmap_pages_range_noflush (2) bpf net	-1	syz, C	error		250	1485d	1487d	1/29	never	mm/gup.c: Fix return value for __gup_longterm_locked()
KMSAN: uninit-value in rtl8150_open (2) prio:high net usb	7				5	107d	175d	26/29	never	8c9c5b9a6896 net: usb: rtl8150: handle link status read failures
BUG: using smp_processor_id() in preemptible code in sk_skb_reason_drop net prio:low	4	syz, C	error		298	3h02m	5d23h	1/29	never	drop_monitor: use raw_cpu_ptr() in tracepoint probes
possible deadlock in ip_check_mc_rcu prio:high net	4				1	62d	21d	21/29	never	2987ee196c88 igmp: convert struct ip_sf_list to RCU
divide error in tcp_rcv_space_adjust (4) prio:normal net	2				4	20d	36d	0/29	never	tcp: do not let tcp_rmem be set below 4096
KMSAN: uninit-value in nci_dev_up (3) prio:high nfc net	7				1	125d	121d	26/29	never	d56575a2595e nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
KMSAN: uninit-value in erspan_build_header (2) net	7	syz, C			346	101d	908d	1/29	never	bpf: Don't redirect too small packets
KASAN: slab-use-after-free Read in netdev_nl_queue_fill_one prio:normal net	19				13	21d	39d	22/29	never	07e98a4d5e9c netdevsim: update queue NAPI association on queue reset
KASAN: slab-use-after-free Read in nla_put_napi_id prio:normal net	19				3	22d	30d	22/29	never	07e98a4d5e9c netdevsim: update queue NAPI association on queue reset
WARNING in udp_v6_send_skb prio:low net	-1				7	8d04h	48d	15/29	never	b83641e0ab8b net: ipv4: Fix UDP length overflow with PMTU discover and big MTU 0ae10b6be49b net: ipv6: Fix UDP length overflow with PMTU discover and big MTU
WARNING in tcf_skbmod_act net prio:high	-1				33	2d15h	24d	22/29	never	81d0d1e64f30 net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
KASAN: use-after-free Read in qdisc_pkt_len_segs_init prio:high net	19	syz, C	error		151	14d	155d	21/29	never	28a57fb2c5df net: iptunnel: fix stale transport header during tunnel decapsulation
WARNING in trace_event_raw_event_icmp_send prio:low net	-1	C			3	18d	22d	21/29	never	7fcc2fe39fed net: icmp: avoid invalid transport header access in icmp_send tracepoint
WARNING in netdev_queue_get_dma_dev prio:low net	-1	syz, C			294	24d	43d	28/29	never	92465f46f3c3 net: expect instance lock in netdev_queue_get_dma_dev()
WARNING in sk_mc_loop prio:low net	-1				3	42d	43d	29/29	2d09h	b8a39a09ae4e net: remove WARN_ON_ONCE() from sk_mc_loop()
memory leak in udp_tunnel_nic_netdevice_event prio:high net	3	syz, C			6	54d	54d	29/29	2d09h	080695e6f005 net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
KASAN: slab-out-of-bounds Read in copy_from_sockptr prio:high net	17	syz			25	37d	43d	29/29	2d09h	d0c80dbb9704 net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
KMSAN: uninit-value in macvlan_broadcast (2) prio:low net	7	syz, C			9	95d	171d	29/29	19d	12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
memory leak in vlan_vid_add prio:normal net	3	syz, C			1	57d	71d	29/29	30d	dcf15eaf5641 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
INFO: task hung in genl_rcv_msg (4) net	1	syz, C	done		880	31d	713d	29/29	30d	22f8aa35964e tipc: fix infinite loop in __tipc_nl_compat_dumpit
WARNING in rcu_note_context_switch (5) prio:low net	-1	syz, C	error		10	65d	264d	29/29	30d	313a123e1fca ipv6: Change allocation flags to match rcu_read_lock section requirements
KASAN: stack-out-of-bounds Read in xfrm_state_find (6) prio:high net	17				2	84d	83d	29/29	39d	ea528f18231e xfrm: reject optional IPTFS templates in outbound policies
BUG: sleeping function called from invalid context in netif_rx_mode_run prio:normal net	5				1	113d	109d	29/29	57d	5eec4427b89c bridge: Fix sleep in atomic context in netlink path
general protection fault in xdp_master_redirect prio:low bpf net	2				1	106d	106d	29/29	63d	net, bpf: check master for NULL in xdp_master_redirect()
WARNING: refcount bug in nsim_fib_event_nb (3) prio:normal net	13				10	92d	98d	29/29	63d	06b693d2eb66 ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
WARNING in __ethtool_get_link_ksettings net prio:high	-1				5	86d	87d	29/29	63d	cd1c188db109 vlan: defer real device state propagation to netdev_work
INFO: task hung in netdev_rx_mode_work prio:high net	1				44	83d	86d	29/29	63d	cd1c188db109 vlan: defer real device state propagation to netdev_work
general protection fault in arp_create (4) prio:high net	2				2	124d	122d	29/29	63d	f80d3d98d2ff batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
possible deadlock in __ethtool_get_link_ksettings prio:high net	4				154	82d	93d	29/29	63d	cd1c188db109 vlan: defer real device state propagation to netdev_work
WARNING in ip_rt_bug (3) prio:high net	-1	syz, C	error		54	109d	120d	29/29	63d	7eb72c1e3984 ipv4: icmp: reject broadcast/multicast routes
KASAN: slab-use-after-free Read in ipvlan_hard_header (4) prio:high actionable net	19				2	135d	96d	29/29	63d	f4c3d89fc986 tipc: fix UAF in tipc_l2_send_msg()
possible deadlock in __sk_receive_skb prio:high net	4	syz, C	error		80	117d	120d	29/29	63d	dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu prio:high net nfs	17	syz, C			67	112d	148d	29/29	63d	ea25e3c7915b sunrpc: prevent out-of-bounds read in __cache_seq_start()
KASAN: slab-use-after-free Read in sit_tunnel_xmit prio:high net	19				1	102d	101d	29/29	63d	f0e42f0c4337 ipv6: sit: reload inner IPv6 header after GSO offloads
WARNING in hsr_addr_is_self prio:low net	-1				8	104d	109d	29/29	63d	afd0f17ca462 hsr: Remove WARN_ONCE() in hsr_addr_is_self().
possible deadlock in udp_sendmsg (2) prio:low net	4				2	95d	95d	29/29	63d	d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
KMSAN: uninit-value in __fl_lookup (3) prio:high net	7				7	91d	110d	29/29	63d	bf6e8af2c8be flow_dissector: check device type before reading ETH_ADDRS
KASAN: slab-use-after-free Read in fib_rules_lookup net prio:high	19				37	90d	92d	29/29	63d	d954a67a7dfa ipv4: fib_rule: Move fib4_rules_exit() to ->exit(). 46762cefe7f4 net: serialize netif_running() check in enqueue_to_backlog()
KCSAN: data-race in xfrm_lookup_with_ifid / xfrm_policy_delete race:benign prio:low net	6				1	96d	96d	29/29	63d	68de007d5ac9 xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
UBSAN: shift-out-of-bounds in xfrm_selector_match (3) prio:high net	-1				1	94d	93d	29/29	63d	40f0b1047918 xfrm: validate selector family and prefixlen during match
KASAN: slab-use-after-free Write in __ipv6_dev_ac_dec prio:high net	22				1	132d	132d	29/29	63d	f723ccaff2fb ipv6: anycast: insert aca into global hash under idev->lock
WARNING in rcuref_put_slowpath net prio:high	-1				1	90d	86d	29/29	63d	7116764ca53f tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
possible deadlock in tcp_recvmsg prio:low net	4				1	141d	141d	29/29	63d	d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
general protection fault in skb_segment (5) prio:normal net	2				34	93d	96d	29/29	63d	2bf43d0e2e6a tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
KASAN: slab-use-after-free Read in sk_msg_recvmsg prio:normal bpf net	19	syz, C	error	error	3	218d	212d	29/29	63d	c010995b29c8 sockmap: Fix use-after-free in udp_bpf_recvmsg()
inconsistent lock state in __sk_receive_skb prio:high net	4	syz, C	error		147	105d	194d	29/29	63d	dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-use-after-free Read in ipv6_chk_acast_addr prio:high net	19				1	118d	110d	29/29	63d	f723ccaff2fb ipv6: anycast: insert aca into global hash under idev->lock
BUG: corrupted list in dev_deactivate_many (2) prio:high net	8	syz			8	98d	100d	29/29	63d	8eed5519e496 net: watchdog: fix refcount tracking races net: watchdog: fix refcount tracking races
WARNING: refcount bug in __inet_csk_reqsk_queue_drop prio:high net	13				9	111d	109d	29/29	63d	e10902df2448 tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
possible deadlock in l2tp_ip6_sendmsg (2) prio:low net	4				4	111d	139d	29/29	63d	d532cddb6c60 nbd: Reclassify sockets to avoid lockdep circular dependency
memory leak in xfrm_policy_construct prio:normal net	3	syz, C			8	161d	161d	29/29	110d	xfrm: fix refcount leak in xfrm_migrate_policy_find
general protection fault in rt6_insert_exception net	2				1	136d	135d	29/29	117d	5ad509c1fdad ipv6: Fix null-ptr-deref in fib6_mtu().
KCSAN: data-race in igmp_rcv / igmp_rcv (2) net	6				1	183d	139d	29/29	117d	c6bebaa744f7 ipv4: igmp: annotate data-races in igmp_heard_query()
KASAN: slab-use-after-free Read in rtl8150_start_xmit usb net	19				146	128d	148d	29/29	117d	23f0e34c64ac net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
KCSAN: data-race in bond_3ad_get_active_agg_info / bond_3ad_state_machine_handler (3) net prio:high	6				1	141d	141d	29/29	117d	c4f050ce06c5 bonding: 3ad: implement proper RCU rules for port->aggregator
kernel BUG in pn_socket_connect net	-1				1	139d	139d	29/29	117d	5b0c911bcdbd net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
kernel BUG in pn_socket_sendmsg net	-1	syz, C			19	140d	147d	29/29	117d	5b0c911bcdbd net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
WARNING in sock_map_destroy (3) bpf net	-1	syz, C	done	error	5	146d	167d	29/29	117d	6451d58a3556 sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}().
general protection fault in bq_flush_to_queue (2) net bpf	2	syz, C	error	error	6	201d	282d	29/29	118d	869c63d5975d bpf: Fix race in cpumap on PREEMPT_RT 7ef83bf1712b net: move promiscuity handling into netdev_rx_mode_work
BUG: MAX_LOCK_DEPTH too low! (6) net prio:normal	-1				1	186d	186d	29/29	118d	b7405dcf7385 bonding: prevent potential infinite loop in bond_header_parse()
BUG: stack guard page was hit in addrconf_rs_timer prio:high net	-1				1	186d	186d	29/29	118d	b7405dcf7385 bonding: prevent potential infinite loop in bond_header_parse()
kernel BUG in pfkey_send_migrate net	-1	syz, C	error		3	179d	186d	29/29	118d	eb2d16a7d599 af_key: validate families in pfkey_send_migrate()
general protection fault in bond_header_create net	2	syz			10	176d	187d	29/29	118d	425000dbf173 team: fix header_ops type confusion with non-Ethernet ports
WARNING in u32_change (2) net	-1	syz, C	error		760	154d	196d	29/29	118d	34bd3c6b0bd3 net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode()
KASAN: slab-use-after-free Read in sock_def_readable (2) net	19	syz, C			123	151d	192d	29/29	118d	922814879542 atm: lec: fix use-after-free in sock_def_readable()
BUG: unable to handle kernel paging request in bond_rr_gen_slave_id (3) net	8				13	181d	214d	29/29	118d	1921f91298d1 net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4) bpf net prio:normal	19				1	170d	168d	29/29	118d	ad8391d37f33 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
KASAN: global-out-of-bounds Read in ip6gre_header net	17	syz, C	error		3	164d	168d	29/29	118d	b120e4432f9f net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
memory leak in radix_tree_insert (2) arm-msm net	3	syz, C			1	232d	1013d	29/29	118d	2428083101f6 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
BUG: sleeping function called from invalid context in vhost_get_avail_idx kvm net virt	5	syz, C			1	151d	148d	29/29	118d	e08a9fac5cf8 vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
KMSAN: uninit-value in netif_skb_features (4) net	7	syz, C			116	167d	344d	29/29	118d	ddc748a391dd net: use skb_header_pointer() for TCPv4 GSO frag_off check
upstream test error: WARNING in enqueue_to_backlog net	-1				70	209d	216d	29/29	130d	net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT
KCSAN: data-race in __inet_lookup_established / inet_put_port (5) net	6				5	198d	212d	29/29	131d	29252397bcc1 inet: annotate data-races around isk->inet_num
KCSAN: data-race in bond_rcv_validate / bond_rcv_validate (2) net	6				1	239d	239d	29/29	132d	f6c3665b6dc5 bonding: annotate data-races around slave->last_rx
unregister_netdevice: waiting for DEV to become free (8) net	2	syz, C	done		443850	133d	1194d	29/29	133d	9af0feae8016 RDMA/core: Fix stale RoCE GIDs during netdev events at registration fa3c411d21eb RDMA/core: always drop device refcount in ib_del_sub_device_and_put() f12b69d8f228 batman-adv: Release references to inactive interfaces ec69daabe452 bpf: Fix reference count leak in bpf_prog_test_run_xdp() 7fcbe5b2c6a4 can: j1939: implement NETDEV_UNREGISTER notification handler 5d5602236f5d can: j1939: make j1939_session_activate() fail if device is no longer registered ac782f4e3bfc ipv4: Fix reference count leak when using error routes with nexthop objects 1809c82aa073 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts bb4c698633c0 team: avoid NETDEV_CHANGEMTU event when unregistering slave 4efa91a28576 xfrm: always flush state and policy upon NETDEV_UNREGISTER event
KASAN: slab-use-after-free Read in macvlan_forward_source net	19				16	229d	251d	29/29	133d	f8db6475a836 macvlan: fix error recovery in macvlan_common_newlink() 7470a7a63dc1 macvlan: fix possible UAF in macvlan_forward_source()
BUG: unable to handle kernel paging request in ip_route_output_key_hash_rcu net	17	syz, C			910	195d	214d	29/29	133d	21ec92774d15 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
general protection fault in sigd_send net	11	syz, C	error		10	223d	321d	29/29	133d	ae88a5d2f29b net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
memory leak in napi_skb_cache_get (2) net virt	3	syz, C			1	246d	243d	29/29	133d	21e4271e6509 Bluetooth: purge error queues in socket destructors
memory leak in l2tp_tunnel_create net	3	syz, C			9	242d	246d	29/29	133d	4d10edfd1475 l2tp: Fix memleak in l2tp_udp_encap_recv().
general protection fault in ife_tlv_meta_encode net	2	syz, C	error		6	237d	238d	29/29	133d	27880b0b0d35 net/sched: act_ife: avoid possible NULL deref
KCSAN: data-race in rxrpc_peer_keepalive_worker / rxrpc_send_data_packet afs net	6				1	293d	252d	29/29	133d	5d5fe8bcd331 rxrpc: Fix data-race warning and potential load/store tearing
KASAN: slab-out-of-bounds Read in fib6_add_rt2node net	17	syz, C			38	209d	217d	29/29	133d	8244f959e2c1 ipv6: Fix out-of-bound access in fib6_add_rt2node().
kernel BUG in fib6_add_rt2node (2) net	-1	syz, C	error		18	233d	253d	29/29	133d	bbf4a17ad9ff ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
KASAN: slab-use-after-free Read in qfq_search_class net	19				1	247d	247d	29/29	133d	3879cffd9d07 net/sched: sch_qfq: do not free existing class in qfq_change_class()
KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release (7) net	6				18	241d	244d	29/29	133d	7a29f6bf60f2 l2tp: avoid one data-race in l2tp_tunnel_del_work()
kernel BUG in ipgre_header (4) net	-1	syz, C			9	242d	251d	29/29	133d	e67c577d8989 ipv4: ip_gre: make ipgre_header() robust
KMSAN: uninit-value in __inet_bind net	7	syz, C			410	208d	214d	29/29	133d	7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
KASAN: slab-use-after-free Read in inet6_addr_del (2) net	19				1	281d	246d	29/29	133d	ddf96c393a33 ipv6: Fix use-after-free in inet6_addr_del().
WARNING in skb_attempt_defer_free net	-1	syz, C			16	229d	254d	29/29	133d	e5c8eda39a9f udp: call skb_orphan() before skb_attempt_defer_free()
KCSAN: data-race in sk_psock_drop / unix_stream_sendmsg bpf net	6				1	209d	203d	29/29	133d	2ef2b20cf4e0 net: annotate data-races around sk->sk_{data_ready,write_space}
memory leak in __build_skb (4) net	3	syz, C			1	250d	247d	29/29	133d	9a56796ad258 gue: Fix skb memleak with inner IP protocol 0.
KASAN: global-out-of-bounds Read in __hw_addr_add_ex (4) net	17				1	259d	246d	29/29	133d	c84fcb79e5db bonding: limit BOND_MODE_8023AD to Ethernet devices
KASAN: stack-out-of-bounds Write in dev_map_redirect_multi bpf net	21				2	205d	217d	29/29	133d	b7bf516c3ecd bpf: Fix stack-out-of-bounds write in devmap
KASAN: slab-use-after-free Read in xfrm_state_find net	19				1395	209d	373d	29/29	133d	1799d8abeabc xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
KASAN: use-after-free Read in __linkwatch_run_queue net	19	syz			108	224d	490d	29/29	133d	83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
KMSAN: uninit-value in __inet6_bind (2) net	7	syz, C			78	209d	215d	29/29	133d	7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
WARNING in __skb_flow_dissect (7) net	-1				275	246d	239d	29/29	133d	5f9b32909659 bonding: provide a net pointer to __skb_flow_dissect()
KCSAN: data-race in fib_table_lookup / fib_table_lookup (4) net	6				1	232d	232d	29/29	133d	6e84fc395e90 ipv4: fib: Annotate access to struct fib_alias.fa_state.
BUG: sleeping function called from invalid context in __bpf_stream_push_str net virt	5	syz, C	done		88	239d	282d	29/29	133d	99a3e3a1cfc9 slab: fix kmalloc_nolock() context check for PREEMPT_RT
WARNING in ip_rt_bug (2) net	-1	syz, C	done	error	612	133d	1435d	29/29	133d	81b84de32bb2 xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
possible deadlock in sch_direct_xmit (5) net	4	syz, C	unreliable		1245	133d	253d	29/29	133d	872ac785e768 ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
KASAN: slab-use-after-free Write in rt6_disable_ip net	22				1	259d	247d	29/29	133d	9a6f0c4d5796 dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
general protection fault in lec_arp_clear_vccs net	19	syz, C	error		84	161d	365d	29/29	133d	101bacb303e8 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
KASAN: slab-use-after-free Read in handle_tx (2) net	19	syz, C			1086	216d	938d	29/29	133d	308e7e4d0a84 serial: caif: fix use-after-free in caif_serial ldisc_close()
KMSAN: uninit-value in IP6_ECN_decapsulate (3) net	7	syz, C			4	252d	252d	29/29	133d	81c734dae203 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
KCSAN: data-race in tcp_assign_congestion_control / tcp_v6_syn_recv_sock race:harmful net	6				1	215d	211d	29/29	133d	858d2a4f67ff tcp: fix potential race in tcp_v6_syn_recv_sock()
KMSAN: kernel-infoleak in __skb_datagram_iter (5) net	9				47	136d	251d	29/29	133d	21cbf883d073 wifi: avoid kernel-infoleak from struct iw_point
KASAN: stack-out-of-bounds Write in dev_map_enqueue_multi bpf net	21				1	196d	196d	29/29	133d	b7bf516c3ecd bpf: Fix stack-out-of-bounds write in devmap
possible deadlock in inet6_getname net	4	syz, C	error		122	201d	215d	29/29	133d	021fd0f87004 net/rds: fix recursive lock in rds_tcp_conn_slots_available
KASAN: slab-use-after-free Write in arp_create net	22				2	182d	251d	29/29	133d	c92510f5e3f8 arp: do not assume dev_hard_header() does not change skb->head
WARNING in kcm_write_msgs net	-1	syz, C	done		622	215d	2372d	29/29	133d	ca220141fa8e kcm: fix zero-frag skb in frag_list on partial sendmsg error
WARNING in ops_undo_list net	-1				3	197d	210d	29/29	133d	479d589b40b8 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
memory leak in llcp_sock_create net nfc	3	syz, C			6	252d	234d	29/29	133d	165c34fb6068 nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
BUG: unable to handle kernel paging request in tcf_idrinfo_destroy net	8				1	281d	277d	29/29	133d	adb25a46dc0a net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy
WARNING: locking bug in nci_close_device (3) nfc net	4				10	230d	252d	29/29	133d	d2492688bb9f nfc: nci: Fix race between rfkill and nci_unregister_device().
BUG: corrupted list in dev_deactivate_many net	19	syz, C			22	141d	380d	29/29	133d	83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
WARNING in mdiobus_get_phy net usb	-1	syz			2	264d	275d	29/29	233d	a1e077a3f76e net: usb: asix: validate PHY address before use
WARNING in nfc_dev_down net nfc	-1	syz, C	error		12	260d	275d	29/29	233d	1ab526d97a57 net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
memory leak in rtl8150_set_multicast net usb	3	syz			1	278d	274d	29/29	233d	12cab1191d98 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
kernel BUG in ip6_pol_route (2) net	-1	syz, C	error		1134	260d	305d	29/29	233d	1adaea51c61b ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
BUG: corrupted list in team_priority_option_set (6) net	8				5	268d	320d	29/29	233d	932ac51d9953 team: fix check for port enabled in team_queue_override_port_prio_changed()
kernel BUG in dql_completed net usb	-1				1	279d	271d	29/29	233d	e34f0df3d81a usbnet: avoid a possible crash in dql_completed()
kernel BUG in ip6gre_header (6) net	-1	syz, C			127	261d	279d	29/29	233d	db5b4e39c4e6 ip6_gre: make ip6gre_header() robust
possible deadlock in ipv6_sock_mc_close (4) net	4	syz, C	done		7	284d	282d	29/29	238d	b98f06f9a5d3 sctp: Fetch inet6_sk() after setting ->pinet6 in sctp_clone_sock().
KASAN: invalid-free in inet_sock_destruct net	24	syz, C	inconclusive		10	271d	282d	29/29	238d	d7ff61e6f3ef sctp: Clear inet_opt in sctp_v6_copy_ip_options().
WARNING in tcf_classify net	-1				2	314d	323d	29/29	252d	b8a7826e4b1a net: sched: Don't use WARN_ON_ONCE() for -ENOMEM in tcf_classify().
BUG: unable to handle kernel NULL pointer dereference in posix_clock_ioctl net	10				12	309d	337d	29/29	252d	329d050bbe63 gve: Implement settime64 with -EOPNOTSUPP
WARNING in em_nbyte_match net	-1	syz, C	done		7	284d	299d	29/29	252d	4fe5a00ec707 net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
BUG: unable to handle kernel NULL pointer dereference in pc_clock_gettime net	10				7	314d	325d	29/29	252d	6ab753b5d8e5 gve: Implement gettimex64 with -EOPNOTSUPP
divide error in __tcp_select_window (4) net	2	syz, C	done		14	293d	295d	29/29	252d	f07f4ea53e22 mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
WARNING in xfrm_state_fini (4) net	-1	syz, C	done		89278	286d	338d	29/29	252d	10deb6986484 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
kernel BUG in ipgre_header (3) net	-1	syz, C			99	252d	331d	29/29	252d	0ae9cfc454ea team: Move team device type change at the end of team_port_add
BUG: unable to handle kernel NULL pointer dereference in pc_clock_settime net	10				7	308d	322d	29/29	252d	329d050bbe63 gve: Implement settime64 with -EOPNOTSUPP
KMSAN: uninit-value in em_canid_match can net	7	syz, C			7	293d	295d	29/29	252d	0c922106d7a5 net/sched: em_canid: fix uninit-value in em_canid_match
KMSAN: kernel-infoleak in __skb_datagram_iter (4) net	18	syz, C			1050	252d	845d	29/29	252d	62b656e43eae net: sched: act_connmark: initialize struct tc_ife to fix kernel leak ce50039be49e net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
BUG: unable to handle kernel NULL pointer dereference in pc_clock_adjtime net	10				5	302d	318d	29/29	252d	6ab753b5d8e5 gve: Implement gettimex64 with -EOPNOTSUPP
WARNING in xfrm_state_migrate (2) net	-1				2	317d	346d	29/29	252d	5502bc4746e8 xfrm: make state as DEAD before final put when migrate fails
possible deadlock in gro_cells_receive net	4				1	333d	331d	29/29	302d	c5394b8b7a92 net: gro_cells: fix lock imbalance in gro_cells_receive()
BUG: sleeping function called from invalid context in sock_map_delete_elem net bpf	5	syz, C	error		58	332d	384d	29/29	302d	7c33e97a6ef5 bpf: Do not disable preemption in bpf_test_run().
possible deadlock in vsock_linger virt net	4	syz, C			7	331d	330d	29/29	302d	f7c877e75352 vsock: fix lock inversion in vsock_assign_transport()
BUG: sleeping function called from invalid context in __set_page_owner net virt	5	syz, C	done		79	328d	342d	29/29	302d	c83aab85e181 mm: don't spin in add_stack_record when gfp flags don't allow
WARNING in rtl8150_start_xmit/usb_submit_urb net usb	-1	syz, C			5	362d	383d	29/29	321d	958baf5eaee3 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
possible deadlock in do_ip_setsockopt (5) net	4				4	350d	371d	29/29	321d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in ah6_output net	-1	syz, C	error		8	359d	479d	29/29	321d	2327a3d6f65c net: ipv6: fix field-spanning memcpy warning in AH output
WARNING in max_vclocks_store mm net	-1	syz, C			3	382d	617d	29/29	321d	e9f35294e18d ptp: Add a upper bound on max_vclocks
KMSAN: uninit-value in nci_dev_up (2) nfc net	7	syz, C			34	349d	405d	29/29	321d	9c328f54741b net: nfc: nci: Add parameter validation for packet data
WARNING in __linkwatch_sync_dev (2) net	-1	syz, C	done		952	335d	461d	29/29	321d	23a6037ce76c bonding: Remove support for use_carrier
possible deadlock in tcp_sendmsg net	4				6	349d	377d	29/29	321d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in vsock_connectible_setsockopt net virt	4				1	365d	365d	29/29	321d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
KASAN: slab-use-after-free Write in __xfrm_state_delete net	22	syz, C	done		4863	331d	414d	29/29	321d	cd8ae32e4e46 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
possible deadlock in inet_shutdown net	4	syz, C	done		11	367d	376d	29/29	321d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in inet_sock_destruct (5) net	-1	syz, C	error		8	334d	371d	29/29	321d	a3967baad4d5 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
KASAN: slab-use-after-free Read in napi_gro_frags (2) net	19	syz, C	done		3	372d	365d	29/29	321d	1091860a16a8 net: tun: Update napi->skb after XDP process
general protection fault in find_match (6) net	17	syz, C			102	359d	365d	29/29	321d	390b3a300d78 nexthop: Forbid FDB status change while nexthop is in a group
WARNING in est_timer net	-1	syz, C	error		497	376d	386d	29/29	321d	9f74c0ea9b26 net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
KMSAN: uninit-value in lan78xx_reset net usb	7	syz, C			14	342d	377d	29/29	321d	49bdb63ff644 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
possible deadlock in inet_sendmsg net	4				2	373d	373d	29/29	321d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in do_tcp_setsockopt net	4				1	376d	376d	29/29	321d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
possible deadlock in __netdev_update_features net	4	syz, C	done		227	324d	471d	29/29	321d	0f82c3ba66c6 macsec: sync features on RTM_NEWLINK
WARNING in xfrm_state_fini (3) net	-1	syz, C	done		122008	342d	414d	29/29	342d	42e42562c9cf xfrm: flush all states in xfrm_state_fini
WARNING: ODEBUG bug in __sk_destruct (3) net	-1	syz, C	error		12	388d	404d	29/29	342d	52565a935213 net: kcm: Fix race condition in kcm_unattach()
possible deadlock in xsk_diag_dump (2) net bpf	4				1	408d	408d	29/29	342d	c64237960819 hamradio: ignore ops-locked netdevs
BUG: unable to handle kernel paging request in nsim_queue_free net	8	syz			49	378d	412d	29/29	342d	b2cafefaf047 netdevsim: Fix wild pointer access in nsim_queue_free().
KMSAN: uninit-value in hsr_get_node (3) net	7	syz, C			30	392d	881d	29/29	342d	7af76e9d18a9 net, hsr: reject HSR frame if skb can't hold tag
WARNING in virtio_transport_send_pkt_info net virt kvm	-1	syz, C			145	383d	401d	29/29	342d	7fb1291257ea vsock/virtio: Fix message iterator handling on transmit path
possible deadlock in xsk_notifier (3) bpf net	4				3	398d	449d	29/29	342d	53898ebabe84 net: lapbether: ignore ops-locked netdevs
WARNING: suspicious RCU usage in corrupted (3) net	4	syz, C	done	done	1	417d	478d	29/29	364d	7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
WARNING in ip6_mr_output net	-1	syz, C	done		143	442d	446d	29/29	377d	af232e7615e4 ipv6: guard ip6_mr_output() with rcu
WARNING in ipv6_gso_segment net	-1	syz, C			8	413d	413d	29/29	377d	d45cf1e7d718 ipv6: reject malicious packets in ipv6_gso_segment()
possible deadlock in team_del_slave (3) net	4	syz, C	error		386707	389d	873d	29/29	377d	bfb4fb77f9a8 team: replace team lock with rtnl lock
general protection fault in clip_push ext4 net	8	syz, C			5	445d	453d	29/29	377d	b993ea46b3b6 atm: clip: prevent NULL deref in clip_push()
general protection fault in qfq_qlen_notify net	2	syz, C			18	432d	439d	29/29	377d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
general protection fault in drr_qlen_notify net	10	syz, C	done		101	430d	439d	29/29	377d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
general protection fault in qdisc_tree_reduce_backlog net	8	syz, C	done		255	426d	439d	29/29	377d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
Unable to handle kernel write to read-only memory at virtual address ADDR (2) net lsm	-1				1	436d	434d	29/29	377d	60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
KMSAN: uninit-value in xfrm_state_find (4) net	19				2406	377d	483d	29/29	377d	94d077c33173 xfrm: state: initialize state_ptrs earlier in xfrm_state_find
general protection fault in hfsc_qlen_notify net	10	syz, C			161	426d	440d	29/29	377d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KMSAN: uninit-value in pptp_xmit (3) net	7	syz, C			49	407d	414d	29/29	377d	de9c4861fb42 pptp: ensure minimal skb length in pptp_xmit()
general protection fault in htb_qlen_notify net	10	syz, C	done		166	430d	440d	29/29	377d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
BUG: stack guard page was hit in sock_close net	-1				1	442d	441d	29/29	377d	c489f3283dbf atm: clip: Fix infinite recursive call of clip_push().
KASAN: slab-out-of-bounds Read in pause_parse_request net	17	syz, C	done		217	441d	447d	29/29	377d	99e3eb454cc4 net: ethtool: avoid OOB accesses in PAUSE_SET
possible deadlock in dev_set_allmulti (2) net	4				2	450d	457d	29/29	377d	bfb4fb77f9a8 team: replace team lock with rtnl lock
WARNING in kvfree_call_rcu net lsm	-1	syz, C			2	436d	434d	29/29	377d	60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
possible deadlock in rpc_close_pipes net nfs	4	syz, C			904	439d	441d	29/29	377d	2a8061ee5e41 better lockdep annotations for simple_recursive_removal()
WARNING: suspicious RCU usage in task_cls_state net	4	syz, C	done		175	390d	478d	29/29	377d	7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
WARNING in remove_proc_entry (8) net nfs	-1	syz			76	411d	460d	29/29	377d	e8d6f3ab5946 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
WARNING in taprio_get_start_time (2) net	-1				1	460d	460d	29/29	377d	ae8508b25def net/sched: taprio: enforce minimum value for picos_per_byte
possible deadlock in team_device_event (3) net	4	syz, C	error		38569	389d	860d	29/29	377d	bfb4fb77f9a8 team: replace team lock with rtnl lock
KASAN: slab-use-after-free Read in tcp_prune_ofo_queue net	19	syz, C	done		356	426d	427d	29/29	377d	7eeabfb23738 tcp: fix UaF in tcp_prune_ofo_queue()
WARNING in inet_sock_destruct (4) net	-1	syz, C	done		6683	379d	1181d	29/29	377d	d3a5f2871adc tcp: Correct signedness in skb remaining space calculation
WARNING: proc registration bug in atm_dev_register net	-1	syz, C	error		5	447d	455d	29/29	377d	a433791aeaea atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
BUG: unable to handle kernel NULL pointer dereference in vcc_sendmsg net	10				1	486d	482d	29/29	377d	22fc46cea91d atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
KASAN: null-ptr-deref Write in rcuref_put (4) net	12	syz, C	done		7	407d	525d	29/29	377d	ae633388cae3 pptp: fix pptp_xmit() error path
kernel BUG in unregister_vlan_dev (3) net	-1				7	459d	500d	29/29	377d	579d4f9ca9a9 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
UBSAN: array-index-out-of-bounds in ip6_route_info_create net	15				27	412d	462d	29/29	406d	b3979e3d2fc9 ipv6: Move fib6_config_validate() to ip6_route_add().
possible deadlock in rtnl_newlink net	4	syz, C			11	462d	475d	29/29	406d	b4a8085ceefb e1000: Move cancel_work_sync to avoid deadlock
WARNING: suspicious RCU usage in mpls_getroute net	4				4	481d	456d	29/29	406d	6dbb0d97c509 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
KASAN: slab-use-after-free Read in lane_ioctl net	19	syz			7	454d	455d	29/29	406d	d13a3824bfd2 net: atm: add lec_mutex
BUG: sleeping function called from invalid context in team_change_rx_flags net	5	syz, C	done		71	436d	484d	29/29	435d	d8d85ef0a631 af_packet: move notifier's packet_dev_mc out of rcu critical section
upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo net	-1				128	489d	503d	29/29	435d	f11cf946c0a9 net: mctp: Don't access ifa_index when missing
general protection fault in dev_set_group net	2	syz, C	error		3	469d	469d	29/29	435d	feafc73f3e6a net: prevent a NULL deref in rtnl_create_link()
BUG: sleeping function called from invalid context in dev_set_promiscuity net	5				370	436d	491d	29/29	435d	6b1d3c5f675c team: grab team lock during team_change_rx_flags
KASAN: slab-use-after-free Read in page_pool_put_unrefed_netmem net	19				3	541d	703d	29/29	435d	271683bb2cf3 page_pool: Fix use-after-free in page_pool_recycle_in_ring
BUG: sleeping function called from invalid context in pcpu_alloc_noprof net	5	syz, C	done		4	486d	500d	29/29	435d	8e5f1bb81274 ipv6: Narrow down RCU critical section in inet6_rtm_newroute().
KMSAN: uninit-value in xa_find io-uring net	7				28964	466d	477d	29/29	435d	eda4623cf989 io_uring/zcrx: init id for xa_find
WARNING in ipv6_addr_prefix net	-1	syz, C	error		3056	454d	503d	29/29	435d	586ceac9acb7 ipv6: Restore fib6_config validation for SIOCADDRT.
WARNING in udp_tunnel_update_gro_rcv net	-1	syz, C	error		108	517d	547d	29/29	435d	c26c192c3d48 udp: properly deal with xfrm encap and ADDRFORM
upstream test error: KMSAN: uninit-value in mctp_dump_addrinfo net	-1				9	493d	503d	29/29	435d	f11cf946c0a9 net: mctp: Don't access ifa_index when missing
WARNING in nla_get_range_unsigned (3) net	-1	syz, C	done		22	491d	496d	29/29	435d	a96876057b9e netlink: fix policy dump for int with validation callback
WARNING in ipmr_rules_exit (2) net	-1				1	482d	470d	29/29	435d	c46286fdd6aa mr: consolidate the ipmr_can_free_table() checks.
WARNING in ipv6_add_dev net	-1				4	524d	526d	28/29	459d	04efcee6ef8d net: hold instance lock during NETDEV_CHANGE
possible deadlock in xsk_diag_dump net bpf	4				4	519d	526d	28/29	463d	f0433eea4688 net: don't mix device locking in dev_close_many() calls
WARNING in tls_strp_msg_load net	-1	syz, C	done		4	544d	537d	28/29	463d	5071a1e606b3 net: tls: explicitly disallow disconnect
WARNING in net_passive_dec net	-1				33	566d	572d	28/29	463d	5c70eb5c593d net: better track kernel sockets lifetime
kernel BUG in qlist_free_all net fs	-1	syz, C	done	done	12	515d	663d	28/29	463d	3a04334d6282 bcachefs: Fix b->written overflow
WARNING in __linkwatch_sync_dev net	-1	syz, C	done		1038	463d	526d	28/29	463d	10a77965760c batman-adv: Fix double-hold of meshif when getting enabled f7a11cba0ed7 bonding: hold ops lock around get_link
WARNING in cleanup_net (4) net	-1	syz, C	error		309	553d	573d	28/29	463d	5c70eb5c593d net: better track kernel sockets lifetime
WARNING in net_free (4) net	-1	syz			4	590d	660d	28/29	463d	5c70eb5c593d net: better track kernel sockets lifetime
general protection fault in ethnl_default_dumpit net	2	syz, C	error		321	557d	558d	28/29	463d	f36a9285828c net: ethtool: use correct device pointer in ethnl_default_dump_one()
WARNING: bad unlock balance in do_setlink net	4	syz, C	done		401	520d	527d	28/29	463d	445e99bdf68d rtnetlink: Fix bad unlock balance in do_setlink().
general protection fault in rtnl_create_link net	8	syz, C	done		49	510d	520d	28/29	463d	4798cfa2097f net: don't try to ops lock uninitialized devs
general protection fault in kernel_sock_shutdown (3) net	2	syz			5	535d	534d	28/29	463d	10206302af85 sctp: add mutual exclusion in proc_sctp_do_udp_port()
possible deadlock in gtp_encap_enable_socket net	4	syz, C	error	done	24	522d	723d	28/29	463d	752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
general protection fault in vxlan_vnigroup_uninit net	2	syz, C			9	581d	583d	28/29	463d	5805402dcc56 vxlan: check vxlan_vnigroup_init() return value
general protection fault in add_wait_queue kvm net virt	10	syz, C	done		676	577d	590d	28/29	463d	78dafe1cf3af vsock: Orphan socket after transport release
general protection fault in ip_route_output_key_hash_rcu (3) net	7				4	567d	593d	28/29	463d	27843ce6ba3d ipvlan: ensure network headers are in skb linear part
kernel BUG in skbprio_enqueue net	-1	syz, C			7	538d	538d	28/29	463d	ce8fe975fd99 net_sched: skbprio: Remove overly strict queue assertions
KMSAN: uninit-value in __ipv6_addr_type net	7	syz, C			3	572d	573d	28/29	463d	27843ce6ba3d ipvlan: ensure network headers are in skb linear part
possible deadlock in dev_set_allmulti net	4				218	505d	553d	28/29	463d	27b918007d96 net: vlan: don't propagate flags on open
possible deadlock in ipv6_sock_ac_close (4) net	4	syz, C	error		5	529d	567d	28/29	463d	752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
WARNING: bad unlock balance in __rtnl_unlock net	4	syz, C	done		18	559d	561d	28/29	463d	f130a0cc1b4f inet: fix lwtunnel_valid_encap_type() lock imbalance
WARNING in sk_skb_reason_drop (2) net	-1				1	639d	639d	28/29	496d	cdd0b9132d71 ip: Return drop reason if in_dev is NULL in ip_route_input_rcu().
KASAN: slab-use-after-free Read in ipvlan_get_iflink net	19				6	622d	719d	28/29	496d	cb358ff94154 ipvlan: Fix use-after-free in ipvlan_get_iflink().
WARNING: lock held when returning to user space in rtnl_link_ops_get net	4	syz, C	done		9	660d	667d	28/29	497d	9b234a97b10c rtnetlink: fix rtnl_dump_ifinfo() error path
WARNING: lock held when returning to user space in nsim_pp_hold_write net	4	syz, C			4	635d	640d	28/29	497d	b9b8301d369b net: netdevsim: fix nsim_pp_hold_write()
general protection fault in vsock_stream_has_data net virt	2	syz, C	done	done	6	613d	610d	28/29	497d	df137da9d6d1 vsock/virtio: cancel close work in the destructor
WARNING in nsim_udp_tunnel_set_port net	-1	syz, C			15	595d	609d	28/29	498d	50bf398e1cea net: netdevsim: try to close UDP port harness races
WARNING in copy_net_ns net	-1				1	653d	653d	28/29	498d	50b94204446e ipmr: tune the ipmr_can_free_table() checks.
BUG: unable to handle kernel paging request in try_to_wake_up (2) net	19	syz, C	error		31	574d	659d	28/29	498d	f10bef73fb35 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
general protection fault in put_page (4) net	2	syz, C	done		170	621d	638d	28/29	498d	cbb26f7d8451 mptcp: fix TCP options overflow.
UBSAN: array-index-out-of-bounds in cake_enqueue (2) net	15				1	634d	632d	28/29	498d	737d4d91d35b sched: sch_cake: add bounds checks to host bulk flow fairness counts
WARNING in nsim_dev_health_break_write net	-1	syz, C			10	637d	642d	28/29	498d	ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
WARNING in netlink_ack_tlv_fill net	-1	syz, C	error		3	676d	672d	28/29	498d	3bf39fa849ab netlink: fix false positive warning in extack during dumps
KMSAN: uninit-value in nsim_get_ringparam net	7	syz, C			59	593d	601d	28/29	498d	6db9d3a536cd netdevsim: don't assume core pre-populates HDS params on GET
WARNING in geneve_xmit (2) net	-1				1	657d	652d	28/29	498d	8588c99c7d47 geneve: do not assume mac header is set in geneve_xmit_skb()
general protection fault in modify_prefix_route net	2	syz, C	done		11	658d	659d	28/29	498d	a747e02430df ipv6: avoid possible NULL deref in modify_prefix_route()
WARNING in NUM net	-1				1	652d	648d	28/29	498d	50b94204446e ipmr: tune the ipmr_can_free_table() checks.
WARNING in ip6mr_net_exit_batch net	-1				1	650d	650d	28/29	498d	50b94204446e ipmr: tune the ipmr_can_free_table() checks.
KMSAN: uninit-value in netdev_pick_tx net	7				3	654d	660d	28/29	498d	0a4cc4accf00 tcp: populate XPS related fields of timewait sockets
WARNING in __dev_queue_xmit (5) net	-1	syz, C			41	639d	638d	28/29	498d	5eb70dbebf32 netdev-genl: avoid empty messages in queue dump
WARNING in free_netdev (2) net	-1	syz			259	501d	606d	28/29	498d	bff406bc0424 net: destroy dev->lock later in free_netdev()
KASAN: slab-use-after-free Read in __dev_get_by_index net	19				1	657d	652d	28/29	498d	750e51603395 net: avoid potential UAF in default_operstate()
kernel BUG in send_hsr_supervision_frame net	-1				2	664d	653d	28/29	498d	af8edaeddbc5 net: hsr: must allocate more bytes for RedBox support
KMSAN: uninit-value in hsr_forward_skb (2) net	7	syz, C			22	652d	659d	28/29	498d	b9653d19e556 net: hsr: avoid potential out-of-bound access in fill_frame_info()
UBSAN: array-index-out-of-bounds in mr_table_dump net	15	syz, C			4	603d	603d	28/29	498d	15a901361ec3 ipmr: do not call mr_mfc_uses_dev() for unres entries
WARNING: suspicious RCU usage in __ethtool_get_ts_info net	4	syz, C	done		41	617d	638d	28/29	498d	4c61d809cf60 net: ethtool: Fix suspicious rcu_dereference usage
UBSAN: shift-out-of-bounds in flow_classify net	-1	syz, C	error		5	622d	621d	28/29	498d	a039e54397c6 net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
WARNING in rxrpc_send_data afs net	-1	syz, C	done		275	638d	645d	28/29	498d	ae4f89989479 rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
WARNING in l2tp_exit_net net	-1	syz	done		219	649d	733d	28/29	498d	5d066766c5f1 net/l2tp: fix warning in l2tp_exit_net found by syzbot
possible deadlock in team_port_change_check (2) net	4	syz, C	done		16406	509d	930d	28/29	498d	3fff5da4ca21 team: prevent adding a device which is already a team device lower
KASAN: slab-use-after-free Read in ila_nf_input net	19	syz			38	621d	625d	28/29	498d	260466b576bc ila: serialize calls to nf_register_net_hooks()
kernel BUG in vlan_get_tci net	-1	syz, C	done		5	625d	625d	28/29	498d	77ee7a6d16b6 af_packet: fix vlan_get_tci() vs MSG_PEEK
WARNING in ip6mr_free_table net	-1	syz, C	done		97859	646d	652d	28/29	498d	50b94204446e ipmr: tune the ipmr_can_free_table() checks.
general protection fault in __skb_frag_ref net	2				2	621d	632d	28/29	498d	cbb26f7d8451 mptcp: fix TCP options overflow.
KASAN: slab-out-of-bounds Read in xfrm_state_find net	17				10	505d	659d	28/29	498d	e952837f3ddb xfrm: state: fix out-of-bounds read during lookup
KASAN: slab-out-of-bounds Read in nsim_dev_health_break_write net	17	syz, C			4	636d	641d	28/29	498d	ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
WARNING in page_pool_put_unrefed_netmem net	-1	syz, C	error		7	611d	751d	28/29	498d	a126061c80d5 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
general protection fault in vsock_connectible_has_data net virt	2	syz, C	done		7	617d	615d	28/29	498d	f6abafcd32f9 vsock/bpf: return early if transport is not assigned
kernel BUG in vlan_get_protocol_dgram net	-1	syz, C	done		8	624d	625d	28/29	498d	f91a5b808938 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
WARNING in skb_checksum_help (3) net	-1	syz, C	done	done	9460	672d	1000d	28/29	597d	89add40066f9 net: drop bad gso csum_start and offset in virtio_net_hdr
WARNING in netlink_sock_destruct (2) net	-1				1	685d	685d	28/29	637d	1904fb9ebf91 netlink: terminate outstanding dump on socket close
divide error in __tcp_select_window (3) net	2	syz, C			5	678d	683d	28/29	638d	ce7356ae3594 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
WARNING: suspicious RCU usage in phonet_route_del net	4	syz, C	done		7	679d	683d	28/29	638d	38a1f50a5efb phonet: do not call synchronize_rcu() from phonet_route_del()
general protection fault in put_page (3) net	2	syz, C	done		47	639d	684d	28/29	639d	341468e0ab4b lib/iov_iter: fix bvec iterator setup
net-next test error: WARNING in __sock_create net	-1				41	687d	700d	28/29	639d	ba4e469e42fe vsock: do not leave dangling sk pointer in vsock_create()
WARNING in sk_skb_reason_drop net	-1	syz, C	done		1447	640d	669d	28/29	639d	85c7975acd97 net: ip: fix unexpected return in fib_validate_source()
WARNING in __sock_create net	-1	syz, C	done		4	678d	679d	28/29	643d	d293958a8595 net/smc: do not leave a dangling sk pointer in __smc_create()
KASAN: null-ptr-deref Write in dst_release (4) net	12				23	708d	895d	28/29	656d	ac888d58869b net: do not delay dst_entries_add() in dst_release()
kernel BUG in eth_header (3) net	-1				1	691d	691d	28/29	669d	4ed234fe793f netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
BUG: Bad page state in bpf_test_run_xdp_live net	-1	syz, C	done		17	685d	688d	28/29	671d	c40dd8c47325 bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
general protection fault in dev_map_enqueue (2) bpf net	19	syz, C	error	done	336	776d	842d	28/29	672d	09d88791c7cd bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
INFO: task hung in nsim_dev_hwstats_exit net	1				43	673d	711d	28/29	672d	a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
UBSAN: shift-out-of-bounds in xfrm_selector_match (2) net	-1	syz, C	error		10	717d	729d	28/29	672d	3f0ab59e6537 xfrm: validate new SA's prefixlen using SA family when sel.family is unset
INFO: task hung in devlink_pernet_pre_exit (2) net	1				32	677d	696d	28/29	672d	a1494d532e28 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
KASAN: slab-use-after-free Read in advance_sched net	19	syz, C	error		15	716d	1002d	28/29	672d	f504465970ae net: sched: fix use-after-free in taprio_change()
KMSAN: uninit-value in slhc_remember net	7				4	707d	707d	28/29	672d	7d3fce8cbe3a slip: make slhc_remember() more robust against malicious packets
general protection fault in ethnl_phy_doit net	2	syz, C	done		6	735d	736d	28/29	690d	fce1e9f86af1 net: ethtool: phy: Check the req_info.pdn field for GET commands
general protection fault in rt6_disable_ip net	2				1	734d	734d	28/29	692d	04ccecfa959d UPSTREAM: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
KASAN: use-after-free Read in ila_nf_input (2) net	19				14	698d	746d	28/29	694d	031ae72825ce ila: call nf_unregister_net_hooks() sooner
WARNING in pppol2tp_release net	-1				3	769d	772d	28/29	694d	c1b2e36b8776 l2tp: flush workqueue before draining it
WARNING: refcount bug in ethnl_phy_done net	13	syz, C	done		4	736d	735d	28/29	694d	1ad84a151af7 net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP
linux-next test error: WARNING in rcu_core net virt	-1				16	767d	775d	28/29	694d	b8c8ba73c68b slub: Introduce CONFIG_SLUB_RCU_DEBUG
WARNING in l2tp_udp_encap_destroy net	-1				3	768d	767d	28/29	694d	c1b2e36b8776 l2tp: flush workqueue before draining it
kernel BUG in __sock_sendmsg net	-1	syz, C			111	743d	760d	28/29	694d	fe1910f9337b tcp_bpf: fix return value of tcp_bpf_sendmsg()
WARNING in handle_std_frame net	-1				3	740d	742d	28/29	694d	430d67bdcb04 net: hsr: Use the seqnr lock for frames received via interlink port.
UBSAN: array-index-out-of-bounds in cake_enqueue net	15				1	759d	758d	28/29	694d	546ea84d07e3 sched: sch_cake: fix bulk flow accounting logic for host fairness
WARNING in __dev_queue_xmit (4) net	-1	syz, C			387	695d	742d	28/29	694d	9d301de12da6 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
WARNING in hsr_fill_frame_info net	-1	syz, C	error		80	719d	747d	28/29	694d	430d67bdcb04 net: hsr: Use the seqnr lock for frames received via interlink port.
general protection fault in hsr_proxy_announce net	2				2	741d	740d	28/29	694d	a7789fd4caaf net: hsr: prevent NULL pointer dereference in hsr_proxy_announce()
WARNING in sock_map_close (2) bpf net	-1	syz, C	done		3	755d	755d	28/29	694d	1461f5a3d810 l2tp: avoid overriding sk->sk_user_data
WARNING in bond_xdp_get_xmit_slave (2) net	-1				124	728d	828d	28/29	694d	0cbfd45fbcf0 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
KASAN: slab-use-after-free Read in unix_stream_read_actor (2) net	19	syz, C	inconclusive		4	746d	742d	28/29	694d	5aa57d9f2d53 af_unix: Don't return OOB skb in manage_oob().
WARNING: lock held when returning to user space in ethnl_act_cable_test net	4	syz, C	done		43	749d	751d	28/29	694d	3d6a0c4f4552 net: fix unreleased lock in cable test
BUG: unable to handle kernel paging request in bpf_prog_ADDR (3) bpf net	8	syz, C	done		6	795d	795d	28/29	694d	92de36080c93 bpf: Fail verification for sign-extension of packet data/data_end/data_meta
WARNING in ethnl_req_get_phydev net	-1	syz, C	done		73	750d	751d	28/29	694d	cff69f72d333 ethtool: pse-pd: move pse validation into set
INFO: rcu detected stall in neigh_timer_handler (8) net	1	syz, C	done	done	72	766d	825d	28/29	695d	22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
KMSAN: uninit-value in gtp_dev_xmit net	7				3	778d	778d	28/29	707d	3a3be7ff9224 gtp: pull network headers in gtp_dev_xmit()
general protection fault in reuseport_add_sock (3) net	2	syz, C	done		3	780d	779d	28/29	713d	9ab0faa7f9ff sctp: Fix null-ptr-deref in reuseport_add_sock().
BUG: stack guard page was hit in vsock_bpf_recvmsg net virt	-1	syz, C	done		6	767d	768d	28/29	713d	69139d2919dd vsock: fix recursive ->recvmsg calls
BUG: unable to handle kernel paging request in net_generic net	8				1	788d	783d	28/29	713d	86a41ea9fd79 l2tp: fix lockdep splat
WARNING: refcount bug in inet_twsk_kill net	13				5	766d	766d	28/29	713d	565d121b6998 tcp: prevent concurrent execution of tcp_sk_exit_batch
KASAN: slab-use-after-free Read in kcm_release net	19	syz, C			2	822d	862d	28/29	713d	807067bf014d kcm: Serialise kcm_sendmsg() for the same socket.
WARNING in tcp_sk_exit_batch net	-1				3	763d	801d	28/29	713d	565d121b6998 tcp: prevent concurrent execution of tcp_sk_exit_batch
WARNING in skb_warn_bad_offload (5) net	-1	syz, C	done		18	759d	792d	28/29	713d	30b03f2a0592 udp: Fall back to software USO if IPv6 extension headers are present
WARNING: refcount bug in get_taint net	13				2	751d	776d	27/29	751d	2fe5273f149c net/smc: prevent UAF in inet_create()
WARNING: refcount bug in sk_common_release net	13	syz, C			9	775d	791d	27/29	751d	2fe5273f149c net/smc: prevent UAF in inet_create()
WARNING: refcount bug in inet_create net	13	syz, C	done		10	777d	804d	27/29	751d	2fe5273f149c net/smc: prevent UAF in inet_create()
KASAN: stack-out-of-bounds Read in xdp_do_check_flushed bpf net	17	syz, C	done		127	775d	796d	27/29	754d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __dev_flush net bpf	19	syz, C			35	775d	789d	27/29	754d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KMSAN: uninit-value in tcf_ct_flow_table_get net	7	syz, C			603	775d	783d	27/29	754d	2191a54f6322 sched: act_ct: take care of padding in struct zones_ht_key
general protection fault in bq_flush_to_queue bpf net	17				22	776d	784d	27/29	754d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KASAN: slab-use-after-free Read in bq_xmit_all bpf net	19	syz, C	done		29	776d	789d	27/29	754d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __xsk_map_flush net bpf	19	syz, C	done		26	776d	792d	27/29	754d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __cpu_map_flush bpf net	10	syz, C	inconclusive		25	776d	789d	27/29	754d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
divide error in tcp_rcv_space_adjust (3) net	2	syz, C	done		3	868d	869d	27/29	762d	94062790aedb UPSTREAM: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
upstream test error: KMSAN: uninit-value in receive_buf net virt	-1				351	789d	844d	27/29	763d	840b2d39a2dc virtio_ring: fix KMSAN error for premapped mode
WARNING in __skb_flow_dissect (6) net	-1				1	862d	862d	27/29	763d	b975d3ee5962 net: add and use skb_get_hash_net
general protection fault in xdp_do_generic_redirect net bpf	2				8	799d	803d	27/29	763d	fecef4cd42c6 tun: Assign missing bpf_net_context.
general protection fault in dev_map_redirect bpf net	2	syz, C			362	799d	806d	27/29	763d	fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in dev_hash_map_redirect bpf net	2	syz, C	done		29	799d	806d	27/29	763d	fecef4cd42c6 tun: Assign missing bpf_net_context.
WARNING in __ip6_make_skb (2) net	-1	syz, C	done		104	827d	842d	27/29	763d	73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
general protection fault in xdp_do_redirect net bpf	2				15	800d	806d	27/29	763d	fecef4cd42c6 tun: Assign missing bpf_net_context.
KASAN: slab-use-after-free Read in l2tp_tunnel_del_work net	19	syz, C	done		99	799d	813d	27/29	763d	f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
stack segment fault in bpf_xdp_redirect bpf net	2	syz, C			181	799d	806d	27/29	763d	fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in cpu_map_redirect bpf net	2	syz, C	done		11	800d	799d	27/29	763d	fecef4cd42c6 tun: Assign missing bpf_net_context.
KASAN: slab-use-after-free Write in l2tp_session_delete net	22	syz, C	done		1286	793d	813d	27/29	763d	f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
KMSAN: uninit-value in vsock_assign_transport (2) net virt	7	syz, C			14	825d	880d	27/29	763d	1e1fdcbdde3b vhost/vsock: always initialize seqpacket_allow
WARNING in __ip_make_skb net	-1	syz, C	done		54	828d	842d	27/29	763d	73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
general protection fault in coalesce_fill_reply net	2	syz, C	done		27	807d	812d	27/29	763d	74d6529b78f7 net: ethtool: Fix the panic caused by dev being null when dumping coalesce
WARNING in bpf_lwt_seg6_adjust_srh net bpf	-1	syz, C	done		30	799d	813d	27/29	763d	c13fda93aca1 bpf: Remove tst_run from lwt_seg6local_prog_ops.
general protection fault in find_match (5) net	2				2	828d	829d	26/29	798d	b86762dbe19a ipv6: prevent possible NULL dereference in rt6_probe()
possible deadlock in br_forward_delay_timer_expired (2) net	4				1	818d	818d	26/29	798d	62e58ddb1465 net: add softirq safety to netdev_rename_lock
general protection fault in xfrm6_get_saddr (2) net	2				1	828d	828d	26/29	798d	d46401052c2d xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
INFO: task hung in devinet_ioctl (5) net	1				59	799d	825d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in addrconf_dad_work (4) net	1				2632	799d	849d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
general protection fault in fib6_nh_init (2) net	2				2	819d	824d	26/29	799d	2eab4543a220 ipv6: prevent possible NULL deref in fib6_nh_init()
INFO: task hung in linkwatch_event (3) net	1				1634	799d	1394d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in register_nexthop_notifier (3) net	1				44	802d	912d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc	1	syz, C	error		1362	799d	1401d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in rtnetlink_rcv_msg net	1	syz, C	inconclusive	inconclusive	1970	799d	2763d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in addrconf_verify_work (8) net	1	syz, C	error		1294	799d	1003d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in mpls_net_exit (2) net	1				50	804d	825d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in switchdev_deferred_process_work (2) net	1	syz, C	inconclusive		1226	799d	2242d	26/29	799d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
BUG: soft lockup in inet6_rtm_newroute net	1				1	815d	815d	26/29	799d	22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
WARNING in skb_ensure_writable bpf net	-1	syz, C	done		2893	799d	877d	26/29	799d	2bbe3e5a2f4e bpf: Avoid splat in pskb_pull_reason
possible deadlock in __sock_map_delete net bpf	4	syz, C			14	841d	885d	26/29	807d	98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING in geneve_xmit net	-1	syz, C	done		42	873d	880d	26/29	817d	d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
general protection fault in ip6_pol_route net	8				73	820d	858d	26/29	820d	b01e1c030770 ipv6: fix possible race in __fib6_drop_pcpu_from()
general protection fault in __fib6_drop_pcpu_from (5) net	8				467	820d	865d	26/29	820d	b01e1c030770 ipv6: fix possible race in __fib6_drop_pcpu_from()
WARNING in packet_setsockopt net	-1	syz, C			83	856d	895d	26/29	825d	86d43e2bf93c af_packet: avoid a false positive warning in packet_setsockopt()
kernel BUG in dev_gro_receive net	-1	syz, C	done		72	837d	854d	25/29	827d	be008726d0ac net: gro: initialize network_offset in network layer
KMSAN: uninit-value in nci_ntf_packet (2) net nfc	7	syz, C			13	829d	842d	25/29	827d	068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
WARNING in sock_map_close bpf net	-1	syz, C	error		182	827d	890d	25/29	827d	4b4647add7d3 sock_map: avoid race between sock_map_close and sk_psock_put
possible deadlock in sock_hash_delete_elem (2) bpf net	4	syz, C			1127	828d	911d	25/29	827d	98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
INFO: rcu detected stall in packet_release net	1	syz, C	unreliable		1	919d	842d	25/29	827d	fb66df20a720 net/sched: taprio: extend minimum interval restriction to entire cycle too
INFO: trying to register non-static key in __timer_delete_sync (2) net	-1	syz, C			45524	855d	873d	25/29	831d	3c668cef61ad net: hsr: init prune_proxy_timer sooner
WARNING in __inet_accept net	-1	syz, C	done		3	849d	849d	25/29	832d	26afda78cda3 UPSTREAM: net: relax socket state check at accept time.
general protection fault in ip6_output net	2				4	866d	885d	25/29	833d	4db783d68b9b ipv6: prevent NULL dereference in ip6_output()
KMSAN: uninit-value in nci_rx_work nfc net	7	syz, C			582	833d	989d	25/29	833d	e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-use-after-free Read in unix_del_edges net	19	syz, C	done		2	880d	880d	25/29	833d	1af2dface5d2 af_unix: Don't access successor in unix_del_edges() during GC.
general protection fault in fib6_rule_action net	2				1	882d	882d	25/29	833d	d101291b2681 ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
KMSAN: uninit-value in dev_map_lookup_elem bpf net	7	syz, C			3	898d	905d	25/29	833d	e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in unwind_dump net	7				1	884d	880d	25/29	833d	90d1f14cbb9d kmsan: compiler_types: declare __no_sanitize_or_inline
KMSAN: uninit-value in sock_map_delete_elem bpf net	7	syz, C			44	834d	905d	25/29	833d	e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
possible deadlock in sch_direct_xmit (4) net	4				1	871d	871d	25/29	833d	86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
WARNING in qdisc_alloc net	-1	syz, C	error		1069	855d	869d	25/29	833d	86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
KASAN: global-out-of-bounds Read in __nla_validate_parse net	17	syz, C			5	891d	891d	25/29	833d	8750539ba317 net: team: fix incorrect maxattr
KASAN: slab-use-after-free Read in vhost_task_fn kvm net virt	19	syz, C	done		2661	867d	869d	25/29	833d	db5247d9bf5c vhost_task: Handle SIGKILL by flushing work and exiting
KMSAN: uninit-value in geneve_xmit (3) net	7	syz, C			14	888d	896d	25/29	846d	d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
KMSAN: kernel-infoleak in __skb_datagram_iter (3) net	9	syz, C			25	849d	903d	25/29	846d	d313eb8b7755 net/sched: act_skbmod: prevent kernel-infoleak
KMSAN: uninit-value in gre_rcv (3) net	7	syz, C			3	901d	902d	25/29	846d	17af420545a7 erspan: make sure erspan_base_hdr is present in skb->head
KCSAN: data-race in sk_psock_drop / sk_psock_skb_ingress_enqueue bpf net	6				1	915d	908d	25/29	846d	6648e613226e bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc	17	syz, C	error		5	884d	893d	25/29	846d	7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
possible deadlock in tty_port_tty_get (2) net bpf	4				3	890d	908d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_delete_elem bpf net	-1	syz, C			17183	873d	912d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in scheduler_tick (3) bpf net	4	syz, C			1179	873d	910d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in pit_timer_fn net bpf	4				7	884d	895d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in rcu_exp_handler net bpf	4	syz, C			1	887d	883d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in rcu_report_exp_cpu_mult net bpf	4	syz, C	done		30	874d	912d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in try_to_wake_up (4) bpf net	4	syz, C	error		19	849d	912d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in ahci_single_level_irq_intr bpf net	4	syz, C			10	895d	903d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref bpf net	-1	syz, C	error		97	874d	887d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_hash_delete_elem bpf net	-1	syz, C	done		16982	873d	912d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in hrtimer_run_queues bpf net	4	syz, C	error		592	873d	910d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in swake_up_one bpf net	4	syz, C			4	885d	884d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in _prb_commit bpf net	-1				4	884d	880d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in posix_timer_fn (2) net bpf	4				1	887d	883d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in drm_handle_vblank net bpf	4				30	884d	910d	25/29	846d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
KASAN: slab-out-of-bounds Read in xsk_setsockopt bpf net	17	syz, C			17	886d	895d	25/29	846d	237f3cf13b20 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
KMSAN: uninit-value in ipvlan_queue_xmit (2) net	7	syz, C			2	920d	881d	25/29	846d	4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
possible deadlock in __unix_gc net	4	syz, C	done		5	873d	876d	25/29	846d	1971d13ffa84 af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
WARNING in gre_tap_xmit (2) net	-1	syz, C	done		67	855d	880d	25/29	846d	4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
general protection fault in dev_map_enqueue net bpf	19	syz, C			676	846d	904d	25/29	846d	5bcf0dcbf906 xdp: use flags field to disambiguate broadcast redirect
KMSAN: uninit-value in nci_ntf_packet net nfc	7	syz, C			79	848d	989d	25/29	846d	d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
possible deadlock in unix_del_edges net	4	syz, C			49	890d	895d	25/29	846d	b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
KASAN: slab-out-of-bounds Read in data_sock_setsockopt net	17	syz, C			2	891d	891d	25/29	846d	138b787804f4 mISDN: fix MISDN_TIME_STAMP handling
KMSAN: uninit-value in nci_dev_up net nfc	7	syz, C			7	906d	965d	25/29	846d	d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
possible deadlock in unix_notinflight net	4	syz, C			7	873d	889d	25/29	846d	b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
INFO: task hung in netlink_dump (4) net	1				72	891d	931d	25/29	887d	00af2aa93b76 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
INFO: task hung in devinet_ioctl (4) net	1				5	918d	918d	25/29	887d	00af2aa93b76 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
WARNING in cleanup_net (3) net	-1	syz			240	887d	1021d	25/29	887d	2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
WARNING in net_free (2) net	-1	syz			27	893d	940d	25/29	887d	2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
KMSAN: uninit-value in ip_tunnel_rcv (2) net	7				1	923d	923d	25/29	888d	b0ec2abf9826 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
possible deadlock in sch_direct_xmit (3) net	4				1	947d	947d	25/29	889d	0bef512012b1 UPSTREAM: net: add netdev_lockdep_set_classes() to virtual drivers
KMSAN: uninit-value in cookie_v4_check net	7	syz, C			9	911d	916d	25/29	889d	956c0d619107 tcp: Clear req->syncookie in reqsk_alloc().
KASAN: slab-use-after-free Read in rt6_fill_node net	19				1	941d	941d	25/29	889d	685f7d531264 net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
KCSAN: data-race in dev_queue_xmit_nit / packet_setsockopt net	6				1	916d	916d	25/29	889d	6ebfad33161a packet: annotate data-races around ignore_outgoing
UBSAN: shift-out-of-bounds in taprio_change net	-1	syz, C	done		4	919d	919d	25/29	889d	343041b59b78 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
WARNING: suspicious RCU usage in in6_dump_addrs (2) net	4	syz, C	done		3	931d	931d	25/29	889d	67ea41d19d2a inet6: expand rcu_read_lock() scope in inet6_dump_addr()
KMSAN: uninit-value in hsr_get_node (2) net	7	syz, C			49	890d	976d	25/29	889d	ddbec99f5857 hsr: Fix uninit-value access in hsr_get_node()
WARNING in mpls_gso_segment net	-1	syz, C	done		20	935d	938d	25/29	889d	025f8ad20f2e net: mpls: error out if inner headers are not set
BUG: unable to handle kernel NULL pointer dereference in dev_map_hash_update_elem net bpf	10	syz, C			2	933d	940d	25/29	889d	281d464a34f5 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
WARNING in sk_nulls_del_node_init_rcu net	-1				1	923d	922d	25/29	889d	04d9d1fc428a tcp: Fix refcnt handling in __inet_hash_connect().
KMSAN: uninit-value in geneve_udp_encap_recv net	7	syz, C			2	934d	964d	25/29	889d	1ca1ba465e55 geneve: make sure to pull inner header in geneve_rx()
kernel BUG in __nla_validate_parse net	-1	syz, C	done		13	918d	921d	25/29	889d	d8a21070b6e1 nexthop: Fix out-of-bounds access during attribute validation
BUG: sleeping function called from invalid context in __lock_sock_fast (2) net	5	syz, C			6	929d	930d	25/29	897d	d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
possible deadlock in tcp_diag_get_aux net	4	syz, C			117	923d	940d	25/29	897d	d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
kernel BUG in eth_header (2) net	-1	syz, C			2	973d	973d	25/29	897d	dad555c816a5 llc: make llc_ui_sendmsg() more robust against bonding changes
BUG: unable to handle kernel NULL pointer dereference in unix_stream_sendmsg net bpf	10	syz, C			1	932d	932d	25/29	897d	4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready bpf net	10	syz, C	unreliable		15	927d	1047d	25/29	897d	4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
possible deadlock in unix_set_peek_off net	4				8	937d	943d	25/29	901d	56667da7399e net: implement lockless setsockopt(SO_PEEK_OFF)
INFO: task hung in unix_stream_sendmsg net	1	syz, C	done		4	938d	941d	25/29	901d	aa82ac51d633 af_unix: Drop oob_skb ref before purging queue in GC.
possible deadlock in __unix_dgram_recvmsg (2) net	4				3	940d	943d	25/29	901d	56667da7399e net: implement lockless setsockopt(SO_PEEK_OFF)
WARNING in send_hsr_supervision_frame (3) net	-1				153	965d	1401d	25/29	902d	37e8c97e5390 net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
memory leak in pppoe_sendmsg net	3	syz, C			26	993d	2665d	25/29	902d	dc34ebd5c018 pppoe: Fix memory leak in pppoe_sendmsg()
WARNING in __unix_gc net	-1	syz, C			49	950d	957d	25/29	902d	1279f9d9dec2 af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
bpf test error: INFO: trying to register non-static key in inet_csk_listen_stop net	-1				4	967d	967d	25/29	903d	435e202d645c ipv6: init the accept_queue's spinlocks in inet6_create
net test error: INFO: trying to register non-static key in inet_csk_listen_stop net	-1				21	967d	970d	25/29	903d	435e202d645c ipv6: init the accept_queue's spinlocks in inet6_create
linux-next test error: INFO: trying to register non-static key in inet_csk_listen_stop net	-1				12	967d	968d	25/29	903d	435e202d645c ipv6: init the accept_queue's spinlocks in inet6_create
possible deadlock in skb_queue_tail (6) net	4				1	962d	962d	25/29	903d	4d322dce82a1 UPSTREAM: af_unix: fix lockdep positive in sk_diag_dump_icons()
memory leak in virtual_ncidev_write (2) net nfc	3	syz, C			2	1001d	1162d	25/29	904d	bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
KMSAN: uninit-value in IP6_ECN_decapsulate (2) net	7	syz, C			3	955d	970d	25/29	904d	8d975c15c0cd ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
INFO: task hung in rtnl_lock (3) net	1	syz, C			128	909d	1260d	25/29	904d	3871aa01e1a7 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
WARNING in inet_csk_destroy_sock (5) net	-1				1	969d	969d	25/29	904d	66b60b0c8c4a dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().
KMSAN: uninit-value in geneve_xmit (2) net	7	syz, C			12	909d	986d	25/29	904d	5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
WARNING in ip6gre_tunnel_xmit net	-1	syz, C	done		2	934d	934d	25/29	904d	5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
KASAN: use-after-free Read in __skb_flow_dissect (3) net	19	syz, C			1	979d	989d	25/29	904d	5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
INFO: task hung in nsim_create net	1				1	953d	953d	25/29	904d	ba5e1272142d netdevsim: avoid potential loop in nsim_dev_trap_report_work()
INFO: task hung in addrconf_dad_work (3) net	1	syz, C			185	918d	960d	25/29	904d	ba5e1272142d netdevsim: avoid potential loop in nsim_dev_trap_report_work()
KMSAN: kernel-infoleak in __skb_datagram_iter (2) net	19	syz, C			126	905d	957d	25/29	904d	661779e1fcaf netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
INFO: task hung in unix_dgram_sendmsg net	1	syz, C	done		36	931d	950d	25/29	905d	25236c91b5ab af_unix: Fix task hung while purging oob_skb in GC.
KMSAN: uninit-value in __llc_lookup_established net	7	syz, C			46	972d	1016d	25/29	905d	e3f9bed9bee2 llc: Drop support for ETH_P_TR_802_2.
KMSAN: uninit-value in tcp_recvmsg (3) net	7				1	991d	978d	25/29	950d	78fbb92af27d nbd: always initialize struct msghdr completely
KASAN: slab-use-after-free Write in fib6_purge_rt net	22				1	1028d	1028d	25/29	958d	5a08d0065a91 ipv6: add debug checks in fib6_info_release()
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2) net	7	syz, C			17	959d	985d	25/29	958d	d375b98e0248 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
KASAN: slab-use-after-free Read in nla_find bpf net	19	syz, C	done		4	1004d	1003d	25/29	960d	2130c519a401 bpf: Use nla_ok() instead of checking nla_len directly
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc	19	syz, C	error		3	1012d	1042d	25/29	960d	c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
KCSAN: data-race in udpv6_sendmsg / udpv6_sendmsg (6) net	6				1	982d	978d	25/29	960d	482521d8e0c6 udp: annotate data-races around up->pending
WARNING in ip6_route_multipath_add net	-1				1	1010d	1010d	25/29	960d	a3c205d0560f ipv6: do not check fib6_has_expires() in fib6_info_release()
general protection fault in hfsc_tcf_block net	2	syz, C	done		1020	982d	990d	25/29	960d	94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
WARNING in __sk_msg_free bpf net	-1	syz, C	done		4	986d	985d	25/29	960d	dc9dfc8dc629 net: tls, fix WARNIING in __sk_msg_free
KASAN: slab-out-of-bounds Read in dsa_user_changeupper net	17	syz, C	done		1303	966d	981d	25/29	960d	844f104790bd net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
general protection fault in qdisc_create net	10	syz, C	done		2821	982d	990d	25/29	960d	94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
WARNING in dev_watchdog (2) net	-1	syz, C	inconclusive		6791	962d	2361d	25/29	960d	e316dd1cf135 net: don't dump stack on queue timeout
WARNING: refcount bug in tcp_sigpool_alloc_ahash net	13				1	1000d	1000d	25/29	960d	b901a4e27694 net/tcp_sigpool: Use kref_get_unless_zero()
KMSAN: uninit-value in netif_skb_features (2) net	7	syz, C			9	1003d	1092d	25/29	960d	9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
WARNING in ip6_route_info_create net	-1	syz, C	done		241	1010d	1014d	25/29	960d	a3c205d0560f ipv6: do not check fib6_has_expires() in fib6_info_release()
general protection fault in page_pool_unlist net	2	syz, C	done		648	1020d	1022d	25/29	960d	f9893fdac319 net: page_pool: fix general protection fault in page_pool_unlist
KCSAN: data-race in ipv6_mc_down / mld_ifc_work (2) net	6				2	972d	978d	25/29	960d	2e7ef287f07c ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
KMSAN: uninit-value in validate_xmit_skb net	7	syz, C			21	961d	978d	25/29	960d	9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
general protection fault in htb_tcf_block net	2	syz, C	done		885	982d	990d	25/29	960d	94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
general protection fault in skb_segment (4) net	8	syz, C	error		4	1004d	1011d	25/29	968d	23d05d563b7e net: prevent mss overflow in skb_segment()
Internal error in fib6_table_lookup net	2				2	1037d	1037d	25/29	968d	18f039428c7d ipvlan: add ipvlan_route_v6_outbound() helper
Internal error in fib6_rule_lookup net	2				2	1040d	1047d	25/29	968d	18f039428c7d ipvlan: add ipvlan_route_v6_outbound() helper
KASAN: slab-use-after-free Read in ife_tlv_meta_decode net	19				1	1015d	1013d	25/29	968d	19391a2ca98b net: sched: ife: fix potential use-after-free
WARNING in fib6_add (5) net	-1	syz, C	done		6	1014d	1177d	25/29	968d	75475bb51e78 ipv6: fix potential NULL deref in fib6_add()
KASAN: slab-out-of-bounds Read in dns_resolver_preparse net	17	syz, C	done		46	994d	1007d	25/29	969d	1997b3cb4217 keys, dns: Fix missing size check of V1 server-list header
general protection fault in dccp_write_xmit (2) net	8	syz, C	done		32	1001d	1057d	25/29	969d	cac23b7d7627 net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
KASAN: null-ptr-deref Write in unix_stream_bpf_update_proto bpf net	12	syz, C	done		54	991d	1021d	25/29	969d	8d6650646ce4 bpf: syzkaller found null ptr deref in unix_bpf proto add
memory leak in skb_copy (2) nfc net	3	syz			3	1042d	1159d	25/29	969d	84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
general protection fault in tls_merge_open_record net	2	syz	unreliable		5	1052d	1052d	25/29	969d	53f2cb491b50 tls: fix NULL deref on tls_sw_splice_eof() with empty record
KASAN: slab-use-after-free Read in unix_stream_read_actor net	19	syz, C	error		6	1024d	1040d	25/29	969d	4b7b492615cf af_unix: fix use-after-free in unix_stream_read_actor()
general protection fault in ptp_ioctl net	2	syz, C	done		8	1044d	1046d	25/29	969d	8a4f030dbced ptp: Fixes a null pointer dereference in ptp_ioctl
kernel BUG in ip6gre_header (2) net	-1	syz, C			2	1069d	1083d	25/29	969d	3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
BUG: unable to handle kernel paging request in nsim_bpf net	8	syz, C			3	1027d	1042d	25/29	969d	c0c6bde586c7 netdevsim: Don't accept device bound programs
kernel BUG in ipgre_header net	-1	syz, C			4	1019d	1033d	25/29	969d	3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
KCSAN: data-race in virtnet_poll / virtnet_stats (2) net virt	6				1	1089d	1087d	25/29	975d	61217d8f6360 virtio_net: use u64_stats_t infra to avoid data-races
KASAN: stack-out-of-bounds Read in tcp_inbound_hash net	17	syz, C	done		28	1039d	1052d	25/29	979d	02f0717e9835 net/tcp: fix possible out-of-bounds reads in tcp_hash_fail()
WARNING in dev_index_reserve (2) net	-1	syz, C	done		68	1059d	1069d	25/29	980d	cbfbfe3aee71 tun: prevent negative ifindex
KMSAN: uninit-value in dccp_v6_err net	7	syz, C			4	1095d	1099d	25/29	982d	6af289746a63 dccp: fix dccp_v4_err()/dccp_v6_err() again
KCSAN: data-race in fib_select_path / fib_select_path net	6				1	1077d	1065d	25/29	982d	195374d89368 ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
KCSAN: data-race in xfrm_sk_policy_insert / xfrm_sk_policy_insert (3) net	6				1	1131d	1104d	25/29	987d	3e4bc23926b8 xfrm: fix a data-race in xfrm_gen_index()
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (7) net	6				1	1083d	1079d	25/29	999d	d0f95894fda7 netlink: annotate data-races around sk->sk_err
general protection fault in scatterwalk_copychunks (4) net crypto	19	syz, C	done	done	1341	999d	2010d	25/29	999d	cfaa80c91f6f net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
KASAN: slab-use-after-free Read in ptp_poll net	19				1	1044d	1044d	25/29	1000d	b714ca2ccf6a ptp: ptp_read should not release queue
WARNING: zero-size vmalloc in xskq_create net bpf	-1				20	1069d	1077d	25/29	1000d	a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
WARNING: zero-size vmalloc in print_tainted bpf net	-1	syz, C			79	1193d	1227d	25/29	1000d	a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
KMSAN: uninit-value in IP6_ECN_decapsulate net	7	syz, C			981	1002d	2917d	25/29	1000d	484b4833c604 hsr: Fix uninit-value access in fill_frame_info()
memory leak in kcm_sendmsg (2) net	3	syz, C			1	1113d	1148d	25/29	1000d	c821a88bd720 kcm: Fix memory leak in error path of kcm_sendmsg()
KMSAN: uninit-value in virtio_transport_recv_pkt virt kvm net	7	syz, C			20713	1041d	1055d	25/29	1000d	34c4effacfc3 virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
WARNING in skb_warn_bad_offload (4) net	-1	syz, C	done		1763	1062d	1090d	25/29	1000d	fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
WARNING in __ip6_append_data net	-1	syz, C	unreliable		5	1070d	1099d	25/29	1000d	9d4c75800f61 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
BUG: corrupted list in ptp_open net	8	syz, C	done		7	1046d	1056d	25/29	1000d	1bea2c3e6df8 ptp: fix corrupted list in ptp_open b714ca2ccf6a ptp: ptp_read should not release queue
KCSAN: data-race in xfrmi_xmit / xfrmi_xmit (3) net	6				2	1086d	1110d	25/29	1000d	f7c4e3e5d4f6 xfrm: interface: use DEV_STATS_INC()
WARNING in skb_checksum_help (2) net	-1	syz, C	done		3816	1000d	1090d	25/29	1000d	fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
BUG: corrupted list in nfc_llcp_register_device net nfc	22	syz, C	error		136	1077d	1365d	25/29	1000d	dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
UBSAN: shift-out-of-bounds in nci_activate_target net nfc	-1	syz, C	done		6	1078d	1263d	25/29	1000d	354a6e707e29 nfc: nci: assert requested protocol is valid
WARNING in inet_csk_get_port (2) net	-1	syz, C	done		88	1061d	1092d	25/29	1000d	8702cf12e6ba tcp: Fix listen() warning with v4-mapped-v6 address.
KCSAN: data-race in udp_lib_setsockopt / udp_lib_setsockopt net	6				2	1121d	1107d	25/29	1000d	882af43a0fc3 udplite: fix various data-races
KMSAN: uninit-value in fq_change net	7	syz, C			8	1042d	1044d	25/29	1000d	f1a3b283f852 UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
KCSAN: data-race in xfrm_lookup_with_ifid / xfrm_lookup_with_ifid (7) net	6				1	1078d	1078d	25/29	1000d	de5724ca38fd xfrm: fix a data-race in xfrm_lookup_with_ifid()
KMSAN: uninit-value in llc_station_rcv net	7	syz, C			2	1055d	1065d	25/29	1000d	7b3ba18703a6 llc: verify mac len before reading mac header
INFO: rcu detected stall in sys_close (5) net	1	syz, C	done		1	1114d	1114d	23/29	1070d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in unregister_vlan_dev net	-1	syz, C	done		1310	1122d	1132d	23/29	1070d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KCSAN: data-race in ____sys_sendmsg / do_ipv6_setsockopt net	6				1	1192d	1176d	23/29	1070d	1ded5e5a5931 net: annotate data-races around sock->ops
KCSAN: data-race in netlink_setsockopt / netlink_setsockopt net	6				1	1133d	1133d	23/29	1070d	8fe08d70a2b6 netlink: convert nlk->flags to atomic flags
general protection fault in generic_hwtstamp_ioctl_lower net	2	syz, C	done		7	1136d	1139d	23/29	1070d	c35e927cbe09 net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib()
INFO: rcu detected stall in unix_release net	1	syz, C	done		1	1133d	1129d	23/29	1070d	da71714e359b net/sched: fix a qdisc modification with ambiguous command request
WARNING: refcount bug in xp_put_pool bpf net	13	syz, C	done		2	1145d	1143d	23/29	1070d	85c2c79a0730 xsk: fix refcount underflow in error path
WARNING in ip6_tnl_exit_batch_net net	-1	syz, C	done		29	1125d	1132d	23/29	1070d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: stack-out-of-bounds Write in __nla_validate_parse net	21	syz, C	done		4	1137d	1152d	23/29	1070d	4d50e50045aa net: flower: fix stack-out-of-bounds in fl_set_key_cfm()
WARNING: bad unlock balance in sockopt_release_sock net	4	syz, C	done		2	1118d	1118d	23/29	1070d	8be6f88b9d3f inet: fix IP_TRANSPARENT error handling
KASAN: slab-use-after-free Read in xsk_diag_dump net bpf	19	syz, C	done		9	1105d	1114d	23/29	1070d	3e019d8a05a3 xsk: Fix xsk_diag use-after-free error during socket cleanup
KCSAN: data-race in dccp_connect / dccp_sendmsg (3) net	6				1	1140d	1140d	23/29	1070d	a47e598fbd86 dccp: fix data-race around dp->dccps_mss_cache
KCSAN: data-race in __ip4_datagram_connect / __ip_make_skb (5) net	6				3	1148d	1176d	23/29	1070d	f866fbc842de ipv4: fix data-races around inet->inet_id
general protection fault in skb_segment (3) net	2	syz, C	done		2	1130d	1130d	23/29	1070d	b616be6b9768 net: do not allow gso_size to be set to GSO_BY_FRAGS
INFO: rcu detected stall in bond_3ad_state_machine_handler net	1				1	1147d	1147d	23/29	1070d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
BUG: soft lockup in fq_pie_timer (4) net	1	syz			5	1100d	1150d	23/29	1070d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
INFO: rcu detected stall in nsim_dev_trap_report_work net	1	syz			4	1105d	1148d	23/29	1070d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in rtnl_dellink (3) net	-1	syz, C	done		492	1122d	1132d	23/29	1070d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: slab-use-after-free Read in team_device_event net	19	syz, C	done		2	1106d	1105d	23/29	1070d	6afcf0fb9270 Revert "net: team: do not use dynamic lockdep key"
KCSAN: data-race in fib_release_info / fib_table_lookup net	6				1	1115d	1115d	23/29	1070d	fce92af1c29d ipv4: annotate data-races around fi->fib_dead
general protection fault in ingress_destroy net	19				10	1150d	1154d	23/29	1070d	079082c60aff tcx: Fix splat during dev unregister
KCSAN: data-race in tcp_make_synack / tcp_rtx_synack net	6				1	1161d	1160d	23/29	1070d	5e5265522a9a tcp: annotate data-races around tcp_rsk(req)->txhash
WARNING in tcx_uninstall net bpf	-1	syz, C	done		7	1144d	1148d	23/29	1070d	079082c60aff tcx: Fix splat during dev unregister
KCSAN: data-race in tcp_check_req / tcp_check_req net	6				2	1178d	1176d	23/29	1070d	eba20811f326 tcp: annotate data-races around tcp_rsk(req)->ts_recent
KASAN: slab-out-of-bounds Read in do_csum net	19	syz, C			160	1074d	1115d	23/29	1070d	8bd795fedb84 arm64: csum: Fix OoB access in IP checksum code for negative lengths
KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (5) net	6				1	1107d	1107d	23/29	1070d	9b271ebaf9a2 ip_tunnels: use DEV_STATS_INC()
KCSAN: data-race in __ip_make_skb / __ip_make_skb net	6				624	1118d	1688d	23/29	1070d	f866fbc842de ipv4: fix data-races around inet->inet_id
WARNING: ODEBUG bug in ingress_destroy net	-1	syz, C	done		16	1151d	1154d	23/29	1070d	dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
WARNING: ODEBUG bug in tcx_uninstall bpf net	-1	syz, C	done		38	1149d	1154d	23/29	1070d	dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
KCSAN: data-race in macsec_handle_frame / macsec_handle_frame (3) net	6				2	1139d	1141d	23/29	1070d	32d0a49d36a2 macsec: use DEV_STATS_INC()
WARNING in macvlan_device_event net	-1				3	1126d	1127d	23/29	1070d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
WARNING in vlan_device_event net	-1				1	1127d	1127d	23/29	1070d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: slab-use-after-free Write in mini_qdisc_pair_swap net	22	syz, C	error		76	1119d	1272d	23/29	1083d	84ad0af0bccd net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting c7cfbd115001 net/sched: sch_ingress: Only create under TC_H_INGRESS
WARNING in sock_i_ino net	-1	syz, C	error		22	1177d	1181d	23/29	1084d	25a9c8a4431c netlink: Add __sock_i_ino() for __netlink_diag_dump().
KMSAN: kernel-infoleak in __skb_datagram_iter net	9				68	1086d	1191d	23/29	1084d	aa5406950726 netlink: do not hard code device address lenth in fdb dumps
KASAN: stack-out-of-bounds Read in ip6mr_ioctl net	21	syz, C	done		192	1182d	1188d	23/29	1084d	3a4f0edbb793 ipv6: fix a typo in ip6mr_sk_ioctl()
BUG: sleeping function called from invalid context in __lock_sock_fast net	5				2	1181d	1181d	23/29	1084d	57fc0f1ceaa4 mptcp: ensure listener is unhashed before updating the sk status
kernel BUG in ip6gre_header net	-1	syz, C			5	1119d	1190d	23/29	1084d	9eed321cde22 net: lapbether: only support ethernet devices
WARNING in unreserve_psock net	-1	syz, C	done		2816	1183d	1191d	23/29	1084d	9f8d0dc0ec4a kcm: Fix unnecessary psock unreservation.
WARNING: refcount bug in fib6_nh_init net	13	syz, C	done		45	1183d	1189d	23/29	1084d	3515440df461 ipv6: also use netdev_hold() in ip6_route_check_nh()
linux-next test error: WARNING in register_net_sysctl net	-1				9	1219d	1219d	23/29	1084d	e7480a44d7c4 Revert "net: Remove low_thresh in ip defrag"
net-next test error: WARNING in register_net_sysctl net	-1				21	1218d	1219d	23/29	1084d	e7480a44d7c4 Revert "net: Remove low_thresh in ip defrag"
KASAN: stack-out-of-bounds Read in skb_splice_from_iter net	17	syz, C	done		64	1183d	1192d	23/29	1084d	5a6f6873606e ip, ip6: Fix splice to raw and ping sockets
possible deadlock in netlink_set_err net	4				1	1183d	1183d	23/29	1084d	8d61f926d420 netlink: fix potential deadlock in netlink_set_err()
possible deadlock in pie_timer (2) net	4				2	1181d	1182d	23/29	1084d	11b73313c124 sch_netem: fix issues in netem_change() vs get_dist_table()
KASAN: slab-out-of-bounds Read in taprio_dequeue_from_txq net	17	syz	error		4	1198d	1222d	23/29	1084d	be3618d96510 net/sched: taprio: fix slab-out-of-bounds Read in taprio_dequeue_from_txq
WARNING in scm_recv net	-1	syz, C	done		8	1170d	1173d	23/29	1084d	603fc57ab70c af_unix: Skip SCM_PIDFD if scm->pid is NULL.
KASAN: stack-out-of-bounds Read in ipmr_ioctl net	21	syz, C	done		208	1182d	1187d	23/29	1084d	634236b34d7a net: remove sk_is_ipmr() and sk_is_icmpv6() helpers
BUG: soft lockup in addrconf_rs_timer (2) net	1	syz, C			51	1183d	1203d	23/29	1170d	cd2b8113c2e8 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
KCSAN: data-race in dev_graft_qdisc / qdisc_lookup_rcu net	6				1	1209d	1209d	23/29	1170d	d636fc5dd692 net: sched: add rcu annotations around qdisc->qdisc_sleeping
general protection fault in vhost_work_queue net virt kvm	2				1	1210d	1205d	23/29	1170d	a284f09effea vhost: Fix crash during early vhost_transport_send_pkt calls
KCSAN: data-race in do_recvmmsg / do_recvmmsg (2) net	6				1	1252d	1227d	22/29	1173d	e05a5f510f26 net: annotate sk->sk_err write from do_recvmmsg()
KCSAN: data-race in tcp_disconnect / tcp_poll (7) net	6				2	1248d	1227d	22/29	1173d	e14cadfd80d7 tcp: add annotations around sk->sk_shutdown accesses
kernel BUG in nsh_gso_segment net	-1				1	1239d	1225d	22/29	1173d	c83b49383b59 net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
general protection fault in __sk_mem_raise_allocated net	2				1	1218d	1213d	22/29	1173d	ad42a35bdfc6 udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
KMSAN: uninit-value in xfrm_state_find net	17	syz, C	error	done	215	1216d	3015d	22/29	1173d	3d776e31c841 xfrm: Reject optional tunnel/BEET mode templates in outbound policies
KMSAN: uninit-value in vlan_dev_hard_start_xmit (2) net	7				1	1249d	1248d	22/29	1173d	dacab578c7c6 vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
divide error in tcp_rcv_space_adjust (2) net	2				1	1263d	1263d	22/29	1173d	4faeee0cf8a5 tcp: deny tcp_disconnect() when threads are waiting
KCSAN: data-race in sk_stream_wait_connect / tcp_disconnect (2) net	6				1	1257d	1227d	22/29	1173d	d0ac89f6f987 net: deal with most data-races in sk_wait_event()
KCSAN: data-race in __netlink_dump_start / netlink_recvmsg (5) net	6				2	1256d	1227d	22/29	1173d	a939d14919b7 netlink: annotate accesses to nlk->cb_running
memory leak in tcf_pedit_init net	3	syz, C			1	1236d	1236d	22/29	1196d	1b483d9f5805 net/sched: act_pedit: free pedit keys on bail from offset check
KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (12) net	6				3	1288d	1288d	22/29	1196d	4b397c06cb98 net: tunnels: annotate lockless accesses to dev->needed_headroom
general protection fault in pause_prepare_data net	2	syz, C	error		34	1329d	1331d	22/29	1196d	f5be9caf7bf0 net: ethtool: fix NULL pointer dereference in pause_prepare_data()
BUG: unable to handle kernel paging request in __alloc_skb net	8				1	1386d	1386d	22/29	1196d	031af50045ea arm64: cmpxchg_double*: hazard against entire exchange variable
KASAN: use-after-free Read in do_csum net	19	syz, C			72	1198d	1364d	22/29	1196d	1ac885574470 inet: control sockets should not use current thread task_frag
KCSAN: data-race in rxrpc_send_data / rxrpc_set_call_completion net afs	6				2	1261d	1241d	22/29	1196d	2b5fdc0f5caa rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
KMSAN: uninit-value in ethnl_set_linkmodes (2) net	7	syz, C			40	1229d	1535d	22/29	1196d	9ad685dbfe7e ethtool: Fix uninitialized number of lanes
KCSAN: data-race in __neigh_event_send / neigh_resolve_output (7) net	6				43	1253d	1227d	22/29	1196d	b071af523579 neighbour: annotate lockless accesses to n->nud_state
WARNING in htb_destroy net	-1	syz, C	done		2	1314d	1314d	22/29	1196d	4fab64126891 net/sched: fix error recovery in qdisc_create()
general protection fault in ethnl_set_plca_cfg net	2	syz, C	done		37	1339d	1339d	22/29	1196d	28dbf774bc87 plca.c: fix obvious mistake in checking retval
memory leak in tcindex_set_parms (3) net	3	syz, C			1	1384d	1380d	22/29	1196d	8c710f75256b net/sched: Retire tcindex classifier
KCSAN: data-race in __neigh_update / neigh_resolve_output net	6				1	1260d	1227d	22/29	1196d	b071af523579 neighbour: annotate lockless accesses to n->nud_state
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around bpf net	10	syz, C	done		29	1276d	1281d	22/29	1196d	e5995bc7e2ba bpf, test_run: fix crashes due to XDP frame overwriting/corruption
general protection fault in virtio_transport_purge_skbs net	2	syz, C	done		3	1273d	1272d	22/29	1196d	b465518dc27d vsock/loopback: use only sk_buff_head.lock to protect the packet queue
WARNING: stack going in the wrong direction? at __sys_setsockopt net	-1				6	1302d	1308d	22/29	1196d	00c8f01c4e84 objtool: Fix ORC 'signal' propagation
upstream test error: unregister_netdevice: waiting for DEV to become free net	-1				204	1308d	1315d	22/29	1196d	b20b8aec6ffc devlink: Fix netdev notifier chain corruption
WARNING in net_free net	-1				1	1249d	1249d	22/29	1196d	9744d2bf1976 smc: Fix use-after-free in tcp_write_timer_handler().
WARNING in cleanup_net (2) net	-1	syz, C	error		72	1231d	1258d	22/29	1196d	9744d2bf1976 smc: Fix use-after-free in tcp_write_timer_handler().
KASAN: use-after-free Read in cfusbl_device_notify net	19	syz, C	done		341	1287d	1435d	22/29	1196d	9781e98a9711 net: caif: Fix use-after-free in cfusbl_device_notify()
general protection fault in taprio_dequeue net	2				1	1355d	1355d	22/29	1196d	3a415d59c1db net/sched: sch_taprio: fix possible use-after-free
WARNING in ip6erspan_tunnel_xmit (2) net	-1	syz, C	unreliable		5	1276d	1276d	22/29	1196d	8e50ed774554 erspan: do not use skb_mac_header() in ndo_start_xmit()
KMSAN: uninit-value in qrtr_tx_resume net arm-msm	7	syz, C			8	1269d	1330d	22/29	1196d	6417070918de net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
INFO: task hung in tls_sw_sendpage (3) net	1				30	1300d	1296d	22/29	1196d	f3221361dc85 net: tls: avoid hanging tasks on the tx_lock
WARNING in nla_get_range_unsigned (2) net	-1	syz, C	done		433	1272d	1307d	22/29	1196d	b20b8aec6ffc devlink: Fix netdev notifier chain corruption
BUG: unable to handle kernel paging request in atm_tc_destroy net	8	syz, C	error		3	1314d	1314d	22/29	1196d	4fab64126891 net/sched: fix error recovery in qdisc_create()
kernel BUG in ip_frag_next net	-1	syz, C	done		9	1330d	1337d	22/29	1196d	f72ff8b81ebc net: fix kfree_skb_list use of skb_mark_not_on_list
net test error: WARNING: suspicious RCU usage in veth_set_xdp_features net	-1				24	1281d	1283d	22/29	1196d	5ce76fe1eead veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
linux-next test error: WARNING: suspicious RCU usage in veth_set_xdp_features net	-1				12	1281d	1282d	22/29	1196d	5ce76fe1eead veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
KCSAN: data-race in netlink_getname / netlink_insert (4) net	6				2	1331d	1335d	22/29	1196d	c1bb9484e3b0 netlink: annotate data races around nlk->portid
WARNING: locking bug in inet_autobind net	4	syz, C	done	error	103	1357d	2680d	22/29	1196d	0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
UBSAN: array-index-out-of-bounds in qfq_update_agg (4) net	15				1	1247d	1247d	22/29	1196d	3037933448f6 net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
KMSAN: uninit-value in raw_sock_get net	7				1	1255d	1254d	22/29	1196d	0a78cf7264d2 raw: Fix NULL deref in raw_get_next().
BUG: scheduling while atomic in msleep net	5	syz, C	done		40	1329d	1337d	22/29	1196d	ea4fdbaa2f77 net/sched: sch_taprio: do not schedule in taprio_reset()
WARNING in __dev_queue_xmit (2) net	-1	syz, C			76	1228d	1300d	22/29	1196d	693aa2c0d9b6 ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
kernel BUG in icmp_glue_bits net	-1				2	1202d	1266d	22/29	1196d	7d63b6712538 icmp: guard against too small mtu
general protection fault in bpf_struct_ops_link_create bpf net	2	syz, C	done		17	1270d	1272d	22/29	1196d	55fbae05476d bpf: Check IS_ERR for the bpf_map_get() return value
WARNING: refcount bug in qrtr_recvmsg (2) arm-msm net	13	syz, C	error		2	1280d	1273d	22/29	1196d	44d807320000 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
WARNING in sock_map_del_link bpf net	-1				91	1251d	1252d	22/29	1196d	8c5c2a4898e3 bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
WARNING: refcount bug in consume_skb net	13				3	1315d	1324d	22/29	1196d	b20b8aec6ffc devlink: Fix netdev notifier chain corruption
INFO: trying to register non-static key in net_free net	-1	syz	error		17982	1303d	1316d	22/29	1196d	6e77a5a4af05 net: initialize net->notrefcnt_tracker earlier
WARNING: suspicious RCU usage in bond_mii_monitor net	4	syz, C			13	1350d	1368d	22/29	1196d	42c7ded0eeac bonding: fix lockdep splat in bond_miimon_commit()
BUG: stack guard page was hit in inet6_release bpf net	-1	syz, C	done		4	1331d	1379d	22/29	1196d	ddce1e091757 bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
possible deadlock in l2tp_tunnel_register (2) net	4	syz, C			153	1290d	1300d	22/29	1196d	0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
KASAN: slab-use-after-free Read in tcf_action_destroy net	19	syz, C	error		32	1223d	1298d	22/29	1196d	dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
possible deadlock in release_sock net	4	syz, C	done		42	1336d	1338d	22/29	1196d	b9fb10d131b8 l2tp: prevent lockdep issue in l2tp_tunnel_register()
memory leak in nfc_genl_se_io net nfc	3	syz, C			1	1311d	1307d	22/29	1196d	25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
general protection fault in tcindex_set_parms net	2	syz, C	done		2	1311d	1311d	22/29	1196d	42018a322bd4 net/sched: tcindex: search key must be 16 bits
kernel BUG in fou_build_udp net	-1	syz, C			1	1231d	1231d	22/29	1196d	c88f8d5cd95f UPSTREAM: sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
KCSAN: data-race in ip_finish_output2 / ip_tunnel_xmit net	6				1	1325d	1325d	22/29	1196d	4b397c06cb98 net: tunnels: annotate lockless accesses to dev->needed_headroom
kernel BUG in rxrpc_put_call afs net	-1	syz, C	done		9	1333d	1346d	22/29	1196d	01644a1f98ff rxrpc: Fix wrong error return in rxrpc_connect_call()
kernel BUG in rxrpc_put_peer net afs	-1	syz, C			80	1336d	1380d	22/29	1196d	9d35d880e0e4 rxrpc: Move client call connection to the I/O thread 03fc55adf876 rxrpc: Only disconnect calls in the I/O thread
INFO: rcu detected stall in devlink_nl_cmd_port_get_dumpit net	1	syz			7	1294d	1311d	22/29	1196d	b20b8aec6ffc devlink: Fix netdev notifier chain corruption
WARNING in inet_sock_destruct (3) net	-1	syz, C			87	1200d	1302d	22/29	1196d	880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
WARNING in devlink_free net	-1				10	1331d	1344d	22/29	1196d	93e71edfd90c devlink: keep the instance mutex alive until references are gone
KMSAN: uninit-value in ipv6_find_tlv net	7	syz, C			271	1237d	2591d	22/29	1196d	ea30388baebc ipv6: Fix an uninit variable access bug in __ip6_make_skb()
WARNING in default_device_exit_batch (4) net	-1	syz, C	error		954	1272d	1398d	22/29	1196d	e667d4690986 bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
KMSAN: kernel-infoleak in copyout (2) net	17	syz, C			6723	1196d	2365d	22/29	1196d	8222d5910dae xfrm: Zero padding when dumping algos and encap
KASAN: null-ptr-deref Read in __fl_put net	11	syz, C	error		16	1277d	1297d	22/29	1196d	dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
kernel BUG in inet_sock_destruct net	-1	syz, C	error		3	1352d	1352d	22/29	1196d	1ac885574470 inet: control sockets should not use current thread task_frag
possible deadlock in inet_put_port net	4				2	1337d	1337d	22/29	1196d	b9fb10d131b8 l2tp: prevent lockdep issue in l2tp_tunnel_register()
BUG: corrupted list in taprio_destroy net	8	syz, C	done		2	1313d	1313d	22/29	1196d	4fab64126891 net/sched: fix error recovery in qdisc_create()
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (6) net	6				2	1264d	1262d	22/29	1196d	a1865f2e7d10 netlink: annotate lockless accesses to nlk->max_recvmsg_len
KASAN: invalid-free in skb_free_head (2) net	24	syz, C	error		25	1237d	1302d	22/29	1196d	880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
riscv/fixes test error: BUG: soft lockup in corrupted (2) net virt	-1				4	1435d	1512d	22/29	1196d	61fc1ee8be26 riscv: Bump COMMAND_LINE_SIZE value to 1024
WARNING in inet_csk_destroy_sock (3) net	-1				1	1210d	1210d	22/29	1208d	e0833d1fedb0 dccp/tcp: Fixup bhash2 bucket when connect() fails.
KASAN: slab-out-of-bounds Read in sk_psock_get net	17	syz, C	done	error	9	1513d	1848d	22/29	1252d	2a0133723f9e net: fix refcount bug in sk_psock_get (2)
possible deadlock in nci_start_poll net nfc	4	syz, C	error	done	83	1301d	1401d	22/29	1254d	b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
kernel BUG in pskb_expand_head net	-1	syz, C	done		1600	1315d	1766d	22/29	1299d	5f33a09e769a can: isotp: convert struct tpcon::{idx,len} to unsigned int 7c759040c1dd can: isotp: fix potential CAN frame reception race in isotp_rcv()
WARNING in ipgre_xmit net	-1	syz, C	done		9916	1550d	1566d	22/29	1300d	8d21e9963bec ip_gre: test csum_start instead of transport header
WARNING: ODEBUG bug in ops_free_list net	-1				1	1627d	1627d	22/29	1300d	1946014ca3b1 rxrpc: fix a race in rxrpc_exit_net()
KASAN: wild-memory-access Read in skb_copy_bits net	17	syz, C			2	1468d	1468d	22/29	1300d	0d24148bd276 inet: ping: fix recent breakage
KCSAN: data-race in __ip_append_data / __ip_append_data net	6				1	1685d	1681d	22/29	1300d	a1cdec57e03a net-timestamp: convert sk->sk_tskey to atomic_t
WARNING: kmalloc bug in xdp_umem_create (2) bpf net	-1	syz, C	done		21	1679d	1745d	22/29	1300d	0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
KCSAN: data-race in tcp_send_challenge_ack / tcp_send_challenge_ack net	6				1	1478d	1478d	22/29	1300d	8c70521238b7 tcp: annotate data-race around challenge_timestamp
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self bpf net	5	syz, C	done		151	1410d	1432d	22/29	1300d	2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
KASAN: use-after-free Read in ipvlan_queue_xmit (3) net	19	syz, C	error	error	8	1504d	2101d	22/29	1300d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
general protection fault in llc_build_and_send_xid_pkt net	2	syz, C	done		2	1637d	1637d	22/29	1300d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
KASAN: use-after-free Read in reqsk_queue_unlink net	19				4	1386d	1437d	22/29	1300d	740ea3c4a0b2 tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
WARNING: refcount bug in tcp_release_cb net	13				2	1375d	1384d	22/29	1300d	0a182f8d6074 bpf, sockmap: fix race in sock_map_free()
net boot error: WARNING in genl_register_family net	-1				3	1419d	1419d	22/29	1300d	e4ba4554209f net: openvswitch: add missing .resv_start_op
WARNING in __skb_flow_dissect (4) net	-1	syz, C	error		6	1411d	1420d	22/29	1300d	9f225444467b ppp: associate skb with a device at tx
WARNING in inet_csk_get_port net	-1	syz, C	done		1166	1349d	1577d	22/29	1300d	593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
KASAN: use-after-free Read in free_netdev (3) net	19	syz, C	inconclusive		130	1392d	1547d	22/29	1300d	3b9bc84d3111 net: tun: unlink NAPI from device on destruction
KCSAN: data-race in dev_activate / qdisc_lookup_rcu net	6				1	1678d	1678d	22/29	1300d	5891cd5ec46c net_sched: add __rcu annotation to netdev->qdisc
WARNING in skb_try_coalesce net	-1	syz, C	error		1521	1572d	2025d	22/29	1300d	763087dab975 net: add skb_set_end_offset() helper
kernel panic: corrupted stack end in netdev_run_todo net	2				1	1544d	1544d	22/29	1300d	b81d591386c3 riscv: Increase stack size under KASAN
general protection fault in sock_reserve_memory net	2	syz, C	done		2	1676d	1676d	22/29	1300d	25206111512d crypto: af_alg - get rid of alg_memory_allocated
WARNING in tcp_enter_loss (3) net	-1	syz, C	inconclusive		7	1417d	1714d	22/29	1300d	0c175da7b037 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
general protection fault in tls_sk_proto_close (3) net	2	syz, C	done		276	1548d	1948d	22/29	1300d	69135c572d1f net/tls: fix tls_sk_proto_close executed repeatedly
possible deadlock in l2tp_tunnel_register net	4	syz, C	error		9492	1300d	1399d	22/29	1300d	af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
general protection fault in em_cmp_match net	10	syz, C			4	1375d	1371d	22/29	1300d	9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
general protection fault in ip6_rcv_core net	8	syz, C	done		275	1390d	1617d	22/29	1300d	0339d25a2807 ipv6: fix NULL deref in ip6_rcv_core()
KASAN: use-after-free Read in nh_netdev_event net	19				3	1400d	1476d	22/29	1300d	5daadc86f27e net: tun: Fix use-after-free in tun_detach()
KASAN: use-after-free Read in rxrpc_lookup_local afs net	22	syz, C			3997	1350d	1380d	22/29	1300d	8fbcc83334a7 rxrpc: Fix I/O thread startup getting skipped eaa02390adb0 rxrpc: Fix NULL deref in rxrpc_unuse_local()
kernel BUG in warn_crc32c_csum_combine net exfat	-1	syz, C	error		17	1414d	1423d	22/29	1300d	7f57f8165cb6 af_key: Fix send_acquire race with pfkey_register
kernel panic: corrupted stack end in nf_tables_getset net	2				1	1409d	1409d	22/29	1300d	b81d591386c3 riscv: Increase stack size under KASAN
net-next test error: WARNING in devl_port_unregister net	-1				52	1406d	1408d	22/29	1300d	1fb22ed67195 devlink: Fix warning when unregistering a port
WARNING in u32_change net	-1	syz, C			28	1355d	1452d	22/29	1300d	7cba18332e36 net: sched: cls_u32: Avoid memcpy() false-positive warning
general protection fault in metadata_dst_free net	2	syz, C			348	1431d	1469d	22/29	1300d	c52add61c27e macsec: don't free NULL metadata_dst
memory leak in virtual_ncidev_write net nfc	3	syz, C			1	1399d	1399d	22/29	1300d	53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
memory leak in __vsock_create net virt io-uring	3	syz, C			1	1624d	1620d	22/29	1300d	7e97cfed9929 vsock: Fix memory leak in vsock_connect()
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (5) net	6				12	1342d	1595d	22/29	1300d	d5076fe4049c netlink: do not reset transport header in netlink_recvmsg()
general protection fault in __inet_hash_connect net	10				5	1408d	1554d	22/29	1300d	593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
kernel panic: corrupted stack end in tc_ctl_action net	2				2	1432d	1486d	22/29	1300d	b81d591386c3 riscv: Increase stack size under KASAN
WARNING in skb_checksum_help net	-1				15	1305d	1478d	22/29	1300d	0d24148bd276 inet: ping: fix recent breakage
WARNING in skb_tunnel_check_pmtu net	-1	syz, C	done		8	1542d	1548d	22/29	1300d	853a76148802 tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
memory leak in ipv6_renew_options net	3	syz, C			1	1526d	1522d	22/29	1300d	e27326009a3d net: ping6: Fix memleak in ipv6_renew_options().
possible deadlock in kcm_ioctl net	4	syz, C	error		20	1486d	1487d	22/29	1300d	8fc29ff3910f kcm: fix strp_init() order and cleanup
memory leak in __tcp_send_ack net	3	syz, C			10	1437d	1969d	22/29	1300d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
kernel BUG in __skb_gso_segment net	-1	syz, C	done		11	1567d	1565d	22/29	1300d	e9d3f80935b6 net/af_packet: make sure to pull mac header
general protection fault in rlb_clear_slave net	2				1	1543d	1543d	22/29	1300d	ab84db251c04 net: bonding: fix possible NULL deref in rlb code
general protection fault in tcp_create_openreq_child net	2	syz, C	unreliable		83	1605d	1607d	22/29	1300d	ba5a4fdd63ae tcp: make sure treq->af_specific is initialized
KCSAN: data-race in veth_xmit / veth_xmit net	6				1	1685d	1681d	22/29	1300d	68468d8c4cd4 veth: fix races around rq->rx_notify_masked
kernel BUG in mld_newpack net	-1				1	1432d	1432d	22/29	1300d	d89d7ff01235 ipv6: ensure sane device mtu in tunnels
KMSAN: uninit-value in ipvlan_queue_xmit net	7	syz, C			2	1478d	2061d	22/29	1300d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
WARNING: suspicious RCU usage in ipmr_rtm_dumplink net	4				11	1541d	1544d	22/29	1300d	0fcae3c8b1b3 ipmr: fix a lockdep splat in ipmr_rtm_dumplink()
possible deadlock in nci_set_local_general_bytes net nfc	4	syz, C			32	1350d	1402d	22/29	1300d	b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
general protection fault in skb_clone (5) net	10	syz, C	done		7	1415d	1433d	22/29	1300d	d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
KCSAN: data-race in fib6_info_hw_flags_set / fib6_purge_rt net	6				1	1704d	1703d	22/29	1300d	d95d6320ba7a ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
KASAN: use-after-free Read in macsec_get_iflink net	19				1	1577d	1573d	22/29	1300d	196a888ca657 macsec: fix UAF bug for real_dev
KMSAN: kernel-infoleak in _copy_to_iter (7) net	21	syz, C			138977	1300d	1652d	22/29	1300d	633593a80898 sctp: fix kernel-infoleak for SCTP sockets
KASAN: use-after-free Write in inet_put_port net	22				1	1557d	1553d	22/29	1300d	593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
WARNING in tcp_disconnect net	-1				2	1427d	1432d	22/29	1300d	72e560cb8c6f tcp: cdg: allow tcp_cdg_release() to be called multiple times
possible deadlock in virtual_nci_close nfc net	4	syz, C	done		939	1301d	1402d	22/29	1300d	b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
WARNING in tcp_mtup_probe_success net	-1				3	1567d	1573d	22/29	1300d	11825765291a tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
BUG: sleeping function called from invalid context in smc_pnet_add net	5	syz, C	done		45	1682d	1683d	22/29	1300d	94fdd7c02a56 net/smc: use GFP_ATOMIC allocation in smc_pnet_add_eth()
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp net bpf	21	syz, C	done		18	1675d	1693d	22/29	1300d	a6763080856f bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
KCSAN: data-race in packet_setsockopt / packet_setsockopt net	6				1	1707d	1695d	22/29	1300d	e42e70ad6ae2 af_packet: fix data-race in packet_setsockopt / packet_setsockopt
possible deadlock in strp_work net	4	syz, C	error		4	1486d	1487d	22/29	1300d	8fc29ff3910f kcm: fix strp_init() order and cleanup
KASAN: use-after-free Read in __fib6_clean_all net	19				30	1390d	1643d	22/29	1300d	5daadc86f27e net: tun: Fix use-after-free in tun_detach()
KMSAN: uninit-value in asix_mdio_write_nopm net usb	7				2	1625d	1646d	22/29	1300d	920a9fa27e78 net: asix: add proper error handling of usb read errors
KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (7) net	6				1	1429d	1428d	22/29	1300d	0c745b5141a4 kcm: annotate data-races around kcm->rx_wait
WARNING in devl_port_unregister net	-1	syz, C			1690	1303d	1406d	22/29	1300d	1fb22ed67195 devlink: Fix warning when unregistering a port
WARNING: suspicious RCU usage in corrupted (2) net	4	syz, C	unreliable		7	1544d	1555d	22/29	1300d	4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
kernel BUG in vhost_get_vq_desc virt kvm net	-1	syz, C	inconclusive		19	1664d	1676d	22/29	1300d	a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
WARNING in skb_warn_bad_offload (3) net	-1	syz, C	done		115	1301d	1437d	22/29	1300d	87445f369cca ipv6: ping: fix wrong checksum for large frames
WARNING in arp_ioctl net	-1	syz, C	error	done	17	1372d	1442d	22/29	1300d	b5f0de6df6dc net: dev: Convert sa_data to flexible array in struct sockaddr
WARNING in ipvlan_queue_xmit net	-1	syz, C	inconclusive		4	1478d	1478d	22/29	1300d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
WARNING: still has locks held in tls_rx_reader_lock net	4	syz, C	done		4	1517d	1519d	22/29	1300d	dde06aaa89b7 tls: rx: release the sock lock on locking timeout
WARNING: suspicious RCU usage in in6_dump_addrs net	4	syz, C	unreliable		613	1512d	1555d	22/29	1300d	4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
kernel panic: corrupted stack end in inet_rtm_newaddr net	2				23	1303d	1640d	22/29	1300d	b81d591386c3 riscv: Increase stack size under KASAN
linux-next test error: WARNING in devl_port_unregister net	-1				23	1406d	1409d	22/29	1300d	1fb22ed67195 devlink: Fix warning when unregistering a port
KASAN: use-after-free Read in tcp_retransmit_timer (5) net	19	syz, C	unreliable		16000	1384d	2396d	22/29	1300d	3a58f13a881e net: rds: acquire refcount on TCP sockets
WARNING in inet_csk_destroy_sock (2) io-uring net	-1	syz, C	done		8	1349d	1435d	22/29	1300d	e0833d1fedb0 dccp/tcp: Fixup bhash2 bucket when connect() fails.
WARNING in __vunmap net	-1	syz, C	error	error	154	1449d	2769d	22/29	1300d	8a04d2fc700f xfrm: Update ipcomp_scratches with NULL when freed
memory leak in napi_get_frags net	3	syz, C			11	2049d	2070d	22/29	1300d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
memory leak in netlink_policy_dump_add_policy net	3	syz, C			1	1500d	1496d	22/29	1300d	249801360db3 net: genl: fix error path memory leak in policy dumping
KCSAN: data-race in fib6_clean_node / inet6_csk_route_socket net	6				1	1700d	1700d	22/29	1300d	aafc2e3285c2 ipv6: annotate accesses to fn->fn_sernum
BUG: unable to handle kernel paging request in inet_unhash net	8				3	1395d	1476d	22/29	1300d	d1e96cc4fbe0 mptcp: fix tracking issue in mptcp_subflow_create_socket()
general protection fault in llc_ui_connect net	2	syz, C	done		17	1632d	1636d	22/29	1300d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
memory leak in ndisc_send_rs net	3	syz, C			2	1797d	1844d	22/29	1300d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
KCSAN: data-race in bond_3ad_initiate_agg_selection / bond_3ad_state_machine_handler (2) net	6				1	1675d	1675d	22/29	1300d	9ceaf6f76b20 bonding: fix data-races around agg_select_timer
general protection fault in llc_ui_sendmsg net	2	syz, C	done		365	1632d	1637d	22/29	1300d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
KASAN: use-after-free Read in inet_twsk_kill net	19				86	1692d	1694d	22/29	1300d	fbb8295248e1 tcp: allocate tcp_death_row outside of struct netns_ipv4
KASAN: slab-out-of-bounds Read in packet_recvmsg net	21	syz, C	inconclusive		12	1649d	2050d	22/29	1300d	c700525fcc06 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
INFO: task hung in vhost_work_dev_flush virt kvm net	1	syz, C	error		2	1680d	1670d	22/29	1300d	e2ae38cf3d91 vhost: fix hung thread due to erroneous iotlb entries
stack segment fault in skb_clone net	2	syz, C	unreliable	inconclusive	3	1554d	1739d	22/29	1300d	d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
WARNING: suspicious RCU usage in bond_ethtool_get_ts_info net	4	syz, C	done		6	1586d	1588d	22/29	1300d	9b80ccda233f bonding: fix missed rcu protection
general protection fault in rlb_req_update_slave_clients net	2	syz, C	inconclusive		3	1563d	1564d	22/29	1300d	ab84db251c04 net: bonding: fix possible NULL deref in rlb code
inconsistent lock state in l2tp_tunnel_register net	4				5599	1386d	1399d	22/29	1300d	af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
KASAN: invalid-free in tcp_disconnect net	24	syz, C	unreliable		74	1428d	1443d	22/29	1300d	72e560cb8c6f tcp: cdg: allow tcp_cdg_release() to be called multiple times
KCSAN: data-race in ip6_dst_gc / ip6_dst_gc (3) net	6				2	1615d	1617d	22/29	1300d	9cb7c013420f ipv6: make ip6_rt_gc_expire an atomic_t
possible deadlock in nci_close_device net nfc	4				2	1380d	1394d	22/29	1300d	b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
KCSAN: data-race in dropmon_net_event / trace_napi_poll_hit net	6				1	1696d	1679d	22/29	1300d	dcd54265c8bc drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
kernel BUG in netem_enqueue net	-1				9	1371d	1596d	22/29	1300d	eeee4b77dc52 net: add more debug info in skb_checksum_help()
memory leak in vlan_dev_set_egress_priority (2) net	3	syz, C			1	1531d	1531d	22/29	1300d	72a0b329114b vlan: fix memory leak in vlan_newlink()
upstream boot error: WARNING in genl_register_family net	-1				468	1413d	1419d	22/29	1300d	e4ba4554209f net: openvswitch: add missing .resv_start_op
WARNING in bpf_test_finish bpf net	-1	syz, C	done		3	1661d	1661d	22/29	1300d	530e214c5b5a bpf, test_run: Fix overflow in XDP frags bpf_test_finish
KASAN: use-after-free Write in enqueue_timer net	22				1	1401d	1401d	22/29	1300d	ab0377803daf mrp: introduce active flags to prevent UAF when applicant uninit
KASAN: null-ptr-deref Write in kcm_tx_work (3) net	12	syz, C	inconclusive	inconclusive	7	1446d	1547d	22/29	1300d	ec7eede369fe kcm: avoid potential race in kcm_tx_work
kernel panic: corrupted stack end in rtnl_newlink kernfs net	2				3489	1300d	1647d	22/29	1300d	b81d591386c3 riscv: Increase stack size under KASAN
WARNING: refcount bug in sk_psock_get (2) net	13	syz, C	done		4	1525d	1566d	22/29	1300d	2a0133723f9e net: fix refcount bug in sk_psock_get (2)
WARNING in nci_send_cmd net nfc	-1	syz, C			13	1387d	1400d	22/29	1300d	0ad6bded175e nfc/nci: fix race with opening and closing
KCSAN: data-race in kcm_rfree / unreserve_rx_kcm (3) net	6				4	1425d	1429d	22/29	1300d	15e4dabda11b kcm: annotate data-races around kcm->rx_psock
WARNING in nci_add_new_protocol net nfc	-1				1	1392d	1388d	22/29	1300d	e329e71013c9 NFC: nci: Bounds check struct nfc_target arrays
memory leak in mld_newpack net	3	syz, C			2	1460d	1878d	22/29	1300d	a43206156263 usbnet: Fix memory leak in usbnet_disconnect()
WARNING in netif_napi_add_weight net	-1	syz, C	inconclusive	done	45	1539d	1551d	22/29	1300d	3b9bc84d3111 net: tun: unlink NAPI from device on destruction
BUG: using smp_processor_id() in preemptible code in tun_chr_write_iter net	4	syz, C	done		1834	1639d	1649d	22/29	1300d	fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
BUG: using smp_processor_id() in preemptible code in netdev_core_stats_alloc net	4	syz, C	error		2210	1639d	1649d	22/29	1300d	fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
BUG: missing reserved tailroom bpf net	-1	syz, C	done		2	1651d	1651d	22/29	1300d	b6f1f780b393 bpf, test_run: Fix packet size check for live packet mode
possible deadlock in ___neigh_create net	4	syz, C	error		24	1685d	1688d	22/29	1300d	4a81f6da9cb2 net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
KASAN: use-after-free Read in __tcf_qdisc_find net	19				1	1472d	1472d	22/29	1300d	ebda44da44f6 net: sched: fix race condition in qdisc_graft()
KCSAN: data-race in __ip4_datagram_connect / raw_bind (2) net	6				1	1695d	1695d	22/29	1300d	153a0d187e76 ipv4: raw: lock the socket in raw_bind()
general protection fault in llc_build_and_send_ui_pkt net	2	syz, C	done		26	1633d	1637d	22/29	1300d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
net-next test error: WARNING: suspicious RCU usage in hsr_node_get_first net	-1				189	1670d	1679d	22/29	1300d	e7f27420681f net: hsr: fix suspicious RCU usage warning in hsr_node_get_first()
general protection fault in llc_alloc_frame net	2				1	1635d	1635d	22/29	1300d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
WARNING in tls_strp_done net	-1	syz, C	error		22	1489d	1494d	22/29	1300d	849f16bbfb68 tls: rx: react to strparser initialization errors
linux-next test error: general protection fault in xfrm_policy_lookup_bytype net	-1				15	1393d	1395d	22/29	1300d	b97df039a68b xfrm: Fix oops in __xfrm_state_delete()
KASAN: slab-out-of-bounds Write in __build_skb_around net bpf	21	syz, C	error		2536	1373d	1388d	22/29	1300d	ce098da1497c skbuff: Introduce slab_build_skb()
WARNING in sk_stream_kill_queues (8) net	-1	syz, C	unreliable		4268	1304d	1540d	22/29	1300d	e9c6e7976026 tcp: fix sock skb accounting in tcp_read_skb()
WARNING in mroute_clean_tables net	-1	syz, C			10	1659d	1679d	22/29	1300d	5611a00697c8 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
general protection fault in pse_prepare_data net	10	syz, C	inconclusive		6	1350d	1428d	22/29	1300d	46cdedf2a0fa ethtool: pse-pd: fix null-deref on genl_info in dump
KMSAN: uninit-value in bcmp net	19	syz, C	error	done	907	1336d	2657d	22/29	1300d	4f1dc7d9756e fs/ntfs3: Validate attribute name offset
UBSAN: shift-out-of-bounds in tcf_pedit_init net	-1	syz, C	done		59	1580d	1587d	22/29	1300d	4d42d54a7d6a net/sched: act_pedit: sanitize shift argument before usage
KASAN: use-after-free Read in ip6_fragment (2) net	19				1	1392d	1388d	22/29	1300d	803e84867de5 ipv6: avoid use-after-free in ip6_fragment()
general protection fault in llc_build_and_send_test_pkt net	2	syz, C	done		25	1632d	1637d	22/29	1300d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
WARNING in vhost_dev_cleanup (2) net virt kvm	-1				79	1664d	1672d	22/29	1300d	a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
BUG: unable to handle kernel NULL pointer dereference in em_u32_match net	10	syz, C			2	1355d	1411d	22/29	1300d	9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
KCSAN: data-race in sit_tunnel_xmit / sit_tunnel_xmit net	6				702	1373d	2471d	22/29	1300d	cb34b7cf17ec ipv6/sit: use DEV_STATS_INC() to avoid data-races
WARNING in ip6erspan_tunnel_xmit net	-1				23	1307d	1551d	22/29	1300d	301bd140ed0b erspan: do not assume transport header is always set
general protection fault in skb_unlink net	2	syz, C	done	error	8	1469d	3030d	22/29	1300d	5121197ecc5d kcm: close race conditions on sk_receive_queue
WARNING in sk_destruct net	-1	syz, C	done		454	1576d	1703d	22/29	1300d	ebdc1a030962 tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
KASAN: slab-out-of-bounds Read in ipvlan_queue_xmit net	17	syz, C	error	error	8	1663d	2140d	22/29	1300d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
kernel panic: corrupted stack end in packet_sendmsg net	2				1	1471d	1471d	22/29	1300d	b81d591386c3 riscv: Increase stack size under KASAN
WARNING in tcp_ack (3) net	-1				16	1567d	1625d	22/29	1300d	40570375356c tcp: add accessors to read/set tp->snd_cwnd
WARNING in napi_complete_done net	-1	syz, C	error		104	1407d	1411d	22/29	1300d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
KCSAN: data-race in inet6_recvmsg / ipv6_setsockopt net	6				1	1684d	1681d	22/29	1300d	086d49058cd8 ipv6: annotate some data-races around sk->sk_prot
KASAN: use-after-free Read in ip6mr_sk_done net	19	syz, C	done		10988	1414d	1683d	22/29	1300d	7d9b1b578d67 ip6mr: fix use-after-free in ip6mr_sk_done()
KASAN: use-after-free Write in mini_qdisc_pair_swap (2) net	22				24	1309d	1689d	22/29	1300d	04c2a47ffb13 net: sched: fix use-after-free in tc_new_tfilter()
KMSAN: uninit-value in tcp_recvmsg net	7	syz, C			25918	1422d	1547d	22/29	1300d	1228b34c8d0e net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
upstream boot error: WARNING in alloc_workqueue net rdma	-1				1	1494d	1494d	22/29	1300d	9993a4f989c7 virtio: Revert "virtio: find_vqs() add arg sizes"
usb-testing boot error: WARNING in __netif_set_xps_queue virt net	-1				57	1418d	1430d	22/29	1300d	fc8695eb11f0 Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
KASAN: use-after-free Read in inet_bind2_bucket_find net io-uring	19	syz, C	done		13	1555d	1562d	22/29	1300d	593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
possible deadlock in __inet_inherit_port net	4	syz, C	done		85	1337d	1399d	22/29	1300d	af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
WARNING in cleanup_net net	-1				613	1300d	1422d	22/29	1300d	d1e96cc4fbe0 mptcp: fix tracking issue in mptcp_subflow_create_socket()
general protection fault in ip6_tnl_xmit net	2				1	1680d	1680d	22/29	1300d	3a5f238f2b36 ip6_tunnel: fix possible NULL deref in ip6_tnl_xmit
possible deadlock in sk_common_release net	4				5	1387d	1398d	22/29	1300d	af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
kernel panic: corrupted stack end in inet6_ioctl net	2				1	1391d	1391d	22/29	1300d	b81d591386c3 riscv: Increase stack size under KASAN
INFO: rcu detected stall in mld_ifc_work net	1	syz, C	inconclusive		1	1676d	1676d	22/29	1300d	5740d0689096 net: sched: limit TC_ACT_REPEAT loops
WARNING: refcount bug in u32_destroy_key net	13				1	1618d	1618d	22/29	1300d	3db09e762dc7 net/sched: cls_u32: fix netns refcount changes in u32_change()
KASAN: use-after-free Read in ip_mc_sf_allow net	19				1	1602d	1602d	22/29	1300d	dba5bdd57bea net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
general protection fault in fq_codel_enqueue (3) net	2	syz, C	inconclusive		5	1537d	1783d	22/29	1300d	fd1894224407 bpf: Don't redirect packets with invalid pkt_len
KCSAN: data-race in fib_alias_hw_flags_set / fib_alias_hw_flags_set net	6				1	1677d	1675d	22/29	1300d	9fcf986cc4bc ipv4: fix data races in fib_alias_hw_flags_set
INFO: trying to register non-static key in __fib6_clean_all (2) net	-1				3	1436d	1461d	22/29	1300d	5daadc86f27e net: tun: Fix use-after-free in tun_detach()
WARNING: bad unlock balance in rxrpc_do_sendmsg afs net	4	syz, C	inconclusive		14	1505d	1710d	22/29	1300d	b0f571ecd794 rxrpc: Fix locking in rxrpc's sendmsg
memory leak in tun_chr_open net	3	syz, C			1	1469d	1469d	22/29	1300d	1118b2049d77 net: tun: Fix memory leaks of napi_get_frags
general protection fault in udpv6_sendmsg net	2	syz, C	error		69	1396d	1406d	22/29	1300d	6423ac2eb31e rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket
KASAN: slab-out-of-bounds Read in decrypt_internal net	17	syz, C	inconclusive	done	4	1622d	1712d	22/29	1300d	9381fe8c849c net/tls: fix slab-out-of-bounds bug in decrypt_internal
WARNING in ipvlan_unregister_nf_hook net	-1	syz, C	done	done	4151	1748d	2385d	22/29	1457d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
general protection fault in sock_close net	2	syz	done	unreliable	2	2210d	2207d	20/29	1574d	77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in dev_change_net_namespace net	-1	syz	done	done	8	1760d	2409d	20/29	1580d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING in rtnl_dellink net	-1	syz, C	done	done	94	1707d	2219d	20/29	1587d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
INFO: task hung in linkwatch_event (2) net	1	syz, C	done	done	1033	1605d	2331d	20/29	1587d	563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
general protection fault in xfrm_user_rcv_msg_compat net	2	syz, C	unreliable	done	1543	1868d	2080d	20/29	1587d	4e9505064f58 net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
WARNING in dst_release (3) net	-1				3	1656d	1736d	20/29	1653d	e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
KCSAN: data-race in __neigh_event_send / ip_finish_output2 (3) net	6				1	1789d	1787d	20/29	1653d	d18785e21386 net: annotate data-race in neigh_output()
general protection fault in unregister_vlan_dev net	2				1	1751d	1751d	20/29	1653d	34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
KASAN: null-ptr-deref Write in dst_release (3) net	21				2	1735d	1735d	20/29	1653d	e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
KCSAN: data-race in bond_alb_init_slave / bond_alb_monitor net	6				1	1751d	1750d	20/29	1653d	dac8e00fb640 bonding: make tx_rebalance_counter an atomic
KMSAN: kernel-infoleak in _copy_to_iter (6) net	9	syz, C			748	1653d	1742d	20/29	1653d	71ddeac8cd1d inet_diag: fix kernel-infoleak for UDP sockets
WARNING: ODEBUG bug in qdisc_create net	-1	syz, C	done		6	1821d	1849d	20/29	1653d	a56d447f196f net/sched: sch_taprio: properly cancel timer from taprio_destroy()
WARNING: suspicious RCU usage in xfrm_set_default net	4	syz, C	done		20	1815d	1820d	20/29	1653d	93ec1320b017 xfrm: fix rcu lock in xfrm_notify_userpolicy()
WARNING: refcount bug in rx_queue_release net	13				12	1755d	1769d	20/29	1653d	34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
kmsan boot error: KMSAN: uninit-value in tcp_child_process net	-1				48	1738d	1749d	20/29	1653d	03cfda4fa6ea tcp: fix another uninit-value (sk_rx_queue_mapping)
kmsan boot error: KMSAN: uninit-value in tcp_conn_request net	-1				27	1751d	1751d	20/29	1653d	a37a0ee4d25c net: avoid uninit-value from tcp_conn_request
KCSAN: data-race in netlink_insert / netlink_sendmsg (4) net	6				88	1805d	1886d	20/29	1653d	7707a4d01a64 netlink: annotate data races around nlk->bound
BUG: sleeping function called from invalid context in ref_tracker_alloc net	5				1	1736d	1736d	20/29	1653d	8b40a9d53d4f ipv6: use GFP_ATOMIC in rt6_probe()
general protection fault in gro_cells_destroy (2) net	2				2	1706d	1722d	20/29	1653d	e28587cc491e sit: do not call ipip6_dev_free() from sit_init_net()
KASAN: null-ptr-deref Write in sock_setsockopt net	12	syz, C			45	1670d	1778d	20/29	1653d	d00c8ee31729 net: fix possible NULL deref in sock_reserve_memory
WARNING: refcount bug in ip6gre_exit_batch_net net	13				2	1764d	1765d	20/29	1653d	34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
KASAN: use-after-free Read in netlbl_catmap_walk lsm net	19	syz, C	inconclusive		1	1848d	1848d	20/29	1653d	0817534ff9ea smackfs: Fix use-after-free in netlbl_catmap_walk()
general protection fault in bpf_skb_cgroup_id net bpf	2	syz, C	inconclusive		107	1809d	1824d	20/29	1653d	435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
general protection fault in inet_csk_accept net	2	syz, C	done		8	1742d	1741d	20/29	1653d	b0cdc5dbcf2b mptcp: never allow the PM to close a listener subflow
KASAN: use-after-free Read in tcp_v4_early_demux net	19				1	1734d	1734d	20/29	1653d	8f905c0e7354 inet: fully convert sk->sk_rx_dst to RCU rules
KCSAN: data-race in unix_inflight / wait_for_unix_gc (3) net	6				1	1720d	1706d	20/29	1653d	9d6d7f1cb67c af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
KASAN: use-after-free Read in cipso_v4_doi_add lsm net	19				1	1797d	1793d	20/29	1653d	0934ad42bb2c smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
KASAN: invalid-free in packet_set_ring net	24	syz, C	inconclusive		4	1739d	1739d	20/29	1653d	ec6af094ea28 net/packet: rx_owner_map depends on pg_vec
general protection fault in bpf_skb_ancestor_cgroup_id net bpf	2	syz, C	unreliable		232	1808d	1824d	20/29	1653d	435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
INFO: rcu detected stall in fq_pie_timer net	1	syz, C	error		35	1693d	1911d	20/29	1653d	61c2402665f1 net/sched: fq_pie: prevent dismantle issue
WARNING: refcount bug in netdev_run_todo net	13				5	1755d	1764d	20/29	1653d	34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
general protection fault in free_percpu net	2	syz	unreliable	done	80	1720d	1987d	20/29	1653d	158b515f703e tun: avoid double free in tun_free_netdev
WARNING: lock held when returning to user space in tcp_setsockopt (2) net	4	syz, C	done	done	6	1726d	1732d	20/29	1653d	b29fcfb54cd7 mptcp: full disconnect implementation
WARNING in tcf_chain0_head_change_cb_del (3) net	-1	syz, C	inconclusive		107	1736d	1872d	20/29	1653d	ab443c539167 sch_cake: do not call cake_destroy() from cake_init()
general protection fault in sock_release (2) net	2				1	1740d	1740d	20/29	1653d	34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
BUG: unable to handle kernel paging request in dev_fetch_sw_netstats net	8				1	1732d	1732d	20/29	1653d	158b515f703e tun: avoid double free in tun_free_netdev
WARNING in free_netdev net	-1				4080	1667d	1708d	20/29	1653d	fcfb894d5952 net: bridge: fix net device refcount tracking issue in error path
WARNING in nsim_dev_reload_destroy net	-1	syz, C	done		2895	1784d	1789d	20/29	1653d	fb9d19c2d844 Revert "devlink: Remove not-executed trap group notifications"
KASAN: use-after-free Read in free_netdev (2) net	19	syz, C	done	done	1715	1751d	2385d	20/29	1653d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING: refcount bug in linkwatch_do_dev net	13				74	1746d	1773d	20/29	1653d	123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
general protection fault in tls_init net	2				1	1753d	1747d	20/29	1653d	404cd9a22150 mptcp: remove tcp ulp setsockopt support
WARNING: refcount bug in in_dev_finish_destroy (2) net	13				42	1754d	1769d	20/29	1653d	34ac17ecbf57 ethtool: use ethnl_parse_header_dev_put()
WARNING in __put_net net	-1				5215	1696d	1709d	20/29	1653d	cb963a19d99f net: sched: do not allocate a tracker in tcf_exts_init()
KCSAN: data-race in skb_queue_tail / unix_dgram_poll (4) net	6				2	1830d	1836d	20/29	1653d	04f08eb44b50 net/af_unix: fix a data-race in unix_dgram_poll
UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len net	-1	syz, C	unreliable		5660	1811d	2109d	20/29	1653d	b193e15ac69d net: prevent user from passing illegal stab size
general protection fault in dev_get_by_index_rcu (2) bpf net	2	syz, C	error		18	1713d	1713d	20/29	1653d	382778edc826 xdp: check prog type before updating BPF link
WARNING in __dev_set_promiscuity net	-1	syz, C	done		11	1814d	1817d	20/29	1653d	a5b8fd657881 net: dev_addr_list: handle first address in __hw_addr_add_ex
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel net usb	5	syz, C	done		28	1728d	1742d	20/29	1653d	744451c162a5 Bluetooth: hci_sync: Push sync command cancellation to workqueue
UBSAN: array-index-out-of-bounds in llc_sap_add_socket net	15				1	1778d	1778d	20/29	1653d	8ac9dfd58b13 llc: fix out-of-bound array index in llc_sk_dev_hash()
net-next test error: WARNING in devlink_nl_region_notify net	-1				24	1813d	1810d	20/29	1653d	ef91abfb20c7 devlink: Add missed notifications iterators
KCSAN: data-race in fib_create_info / free_fib_info net	6				1	1726d	1706d	20/29	1653d	0a6e6b3c7db6 ipv4: update fib_info_cnt under spinlock protection
BUG: sleeping function called from invalid context in tipc_crypto_start net	5	syz, C	done	done	6	1731d	1737d	20/29	1653d	f845fe5819ef Revert "tipc: use consistent GFP flags"
general protection fault in ref_tracker_alloc net	2	syz, C	done		679	1709d	1737d	20/29	1653d	0976b888a150 ethtool: fix null-ptr-deref on ref tracker
WARNING: suspicious RCU usage in ref_tracker_alloc net	4				17	1735d	1737d	20/29	1653d	8b40a9d53d4f ipv6: use GFP_ATOMIC in rt6_probe()
UBSAN: shift-out-of-bounds in qfq_init_qdisc net	-1				1	1718d	1718d	20/29	1653d	7d18a07897d0 sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
KMSAN: uninit-value in pneigh_fill_info net	7	syz, C			14	1740d	1745d	20/29	1653d	e195e9b5dee6 net, neigh: clear whole pneigh_entry at alloc time
KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit (5) net	6				1	1759d	1758d	20/29	1653d	7a10d8c810cf net: annotate data-races on txq->xmit_lock_owner
WARNING in chnl_net_uninit (2) net	-1				1	1830d	1830d	20/29	1653d	550ac9c1aaaa net-caif: avoid user-triggerable WARN_ON(1)
general protection fault in nfc_alloc_send_skb net nfc	2	syz, C	done		2	1720d	1715d	20/29	1653d	dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
BUG: unable to handle kernel NULL pointer dereference in fifo_set_limit net	10	syz, C	error		1	1812d	1812d	20/29	1653d	560ee196fe9e net_sched: fix NULL deref in fifo_set_limit()
WARNING in rtnl_stats_get net	-1	syz, C	unreliable		31	1780d	1968d	20/29	1653d	0854a0513321 net: bridge: fix under estimation in br_get_linkxstats_size()
kernel BUG at net/phonet/socket.c:LINE! net	-1	syz, C	inconclusive		168	1729d	2350d	20/29	1653d	75a2f3152009 phonet/pep: refuse to enable an unbound pipe
KCSAN: data-race in __inet_hash_connect / inet_getname net	6				1	1812d	1786d	20/29	1653d	9dfc685e0262 inet: remove races in inet{6}_getname()
KMSAN: uninit-value in fib_get_nhs net	7	syz, C			14	1671d	1742d	20/29	1653d	7a3429bace0e ipv4: Check attribute length for RTA_GATEWAY in multipath route
WARNING in sk_stream_kill_queues (7) net	-1	syz, C			6689	1653d	1771d	20/29	1653d	c4777efa751d net: add and use skb_unclone_keeptruesize() helper
KASAN: use-after-free Read in vlan_dev_real_dev (2) net	19	syz, C	error		7	1789d	1801d	20/29	1653d	563bcbae3ba2 net: vlan: fix a UAF in vlan_dev_real_dev()
WARNING in cache_grow_begin net	-1				2	1700d	1700d	20/29	1653d	c12837d1bb31 ref_tracker: use __GFP_NOFAIL more carefully
UBSAN: shift-out-of-bounds in xfrm_get_default net	-1	syz, C	done		104	1804d	1842d	20/29	1653d	3c10ffddc61f net: xfrm: fix shift-out-of-bounds in xfrm_get_default
WARNING in ref_tracker_free net	-1	syz, C	done		14831	1710d	1737d	20/29	1653d	123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
inconsistent lock state in netlink_broadcast_filtered net	4				1	1786d	1786d	20/29	1653d	f941eadd8d6d bpf: Avoid races in __bpf_prog_run() for 32bit arches
WARNING in gnet_stats_add_basic net	-1	syz, C	done		14	1793d	1794d	20/29	1653d	e22db7bd552f net: sched: Allow statistics reads from softirq.
BUG: corrupted list in netif_napi_add net	8	syz	unreliable	done	17	1767d	1799d	20/29	1653d	0315a075f134 net: fix premature exit from NAPI state polling in napi_disable()
INFO: task can't die in __cond_resched net	1	syz, C	error		66	1767d	1822d	20/29	1653d	e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
general protection fault in ref_tracker_free net	19				21	1712d	1736d	20/29	1653d	123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
BUG: unable to handle kernel NULL pointer dereference in unix_shutdown net	10	syz, C	unreliable		413	1849d	1852d	20/29	1695d	d359902d5c35 af_unix: Fix NULL pointer bug in unix_shutdown
KASAN: use-after-free Read in cipso_v4_genopt lsm net	19	syz, C	inconclusive		5	2023d	2024d	20/29	1771d	ad5d07f4a9cd cipso,calipso: resolve a number of problems with the DOI refcounts 1165affd4848 net: mac802154: Fix general protection fault
WARNING in idr_get_next arm-msm net	-1	syz, C	error	done	21	1962d	2207d	20/29	1771d	3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
KASAN: null-ptr-deref Read in phy_disconnect net usb	11	syz, C			255	1838d	1842d	20/29	1771d	1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
KMSAN: uninit-value in hsr_fill_frame_info net	7	syz, C			249	1888d	2186d	20/29	1771d	2e9f60932a2c net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
WARNING: refcount bug in ip6_tnl_dev_uninit net	13	syz, C	done		16	1994d	1999d	20/29	1771d	0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
KASAN: slab-out-of-bounds Read in fq_pie_qdisc_enqueue net	17				1	1911d	1911d	20/29	1771d	e70f7a11876a net/sched: fq_pie: fix OOB access in the traffic path
WARNING: suspicious RCU usage in do_ipv6_setsockopt net	4				1	1997d	1997d	20/29	1771d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
memory leak in garp_request_join net	3	syz, C			414	1901d	2424d	20/29	1771d	42ca63f98084 net/802/garp: fix memleak in garp_request_join()
KMSAN: uninit-value in virtio_net_hdr_to_skb net	7	syz, C			325	1889d	1948d	20/29	1771d	61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
WARNING in ethnl_default_doit net	-1				202	1915d	1922d	20/29	1771d	e175aef90269 ethtool: strset: fix message length calculation
KASAN: use-after-free Write in qdisc_class_hash_insert (2) net	22				1	1915d	1915d	20/29	1771d	0cd58e5c53ba pkt_sched: sch_qfq: fix qfq_change_class() error path
KCSAN: data-race in igmp_ifc_event / igmp_ifc_timer_expire net	6				1	1865d	1864d	20/29	1771d	4a2b285e7e10 net: igmp: fix data-race in igmp_ifc_timer_expire()
kernel BUG in llc_sap_action_send_xid_c net	-1	syz, C	error		61	1772d	1986d	20/29	1771d	c7c9d2102c9c net: llc: fix skb_over_panic
BUG: unable to handle kernel NULL pointer dereference in htb_select_queue net	10	syz	done		8	2002d	2017d	20/29	1771d	fb3a3e37de33 sch_htb: Fix offload cleanup in htb_destroy on htb_init failure 93bde210c434 sch_htb: Fix select_queue for non-offload mode
KCSAN: data-race in packet_do_bind / packet_sendmsg (3) net	6				1	1931d	1927d	20/29	1771d	c7d2ef5dd4b0 net/packet: annotate accesses to po->bind
WARNING: suspicious RCU usage in do_recvmmsg net	4				8	1924d	1950d	20/29	1771d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
KASAN: use-after-free Write in sk_psock_stop bpf net	22	syz	done		74	1970d	1989d	20/29	1771d	aadb2bb83ff7 sock_map: Fix a potential use-after-free in sock_map_close()
KCSAN: data-race in unix_dgram_sendmsg / unix_release_sock net	6				1	1921d	1920d	20/29	1771d	a494bd642d91 net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
INFO: rcu detected stall in wg_packet_tx_worker (3) net	1	syz, C	inconclusive		5	1857d	1839d	20/29	1771d	c7c5e6ff533f fq_codel: reject silly quantum parameters
KCSAN: data-race in inet_dgram_connect / udp_lib_get_port (5) net	6				6	1937d	1924d	20/29	1771d	dcd01eeac144 inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
WARNING: refcount bug in vti6_dev_uninit net	13	syz, C			26	1994d	1999d	20/29	1771d	0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
general protection fault in unix_dgram_connect net	2	syz, C	done		2	1846d	1846d	20/29	1771d	dc56ad7028c5 af_unix: fix potential NULL deref in unix_dgram_connect()
memory leak in xfrm_user_rcv_msg net	3	syz, C			1	1916d	1912d	20/29	1771d	7c1a80e80cde net: xfrm: fix memory leak in xfrm_user_rcv_msg
KMSAN: uninit-value in INET_ECN_decapsulate (2) net	7				2	1926d	1996d	20/29	1771d	6628ddfec758 net: geneve: check skb is large enough for IPv4/IPv6 header
KCSAN: data-race in sock_alloc_send_pskb / unix_release_sock (5) net	6				47	1772d	1924d	20/29	1771d	f13ef10059cc net: annotate data race in sock_error()
divide error in __tcp_select_window (2) net	2	syz, C	done		4	1985d	1987d	20/29	1771d	a7150e382267 Revert "tcp: Reset tcp connections in SYN-SENT state"
KMSAN: uninit-value in ip_rcv_core net	7	syz, C			141	1888d	2922d	20/29	1771d	6628ddfec758 net: geneve: check skb is large enough for IPv4/IPv6 header
WARNING in slave_kobj_release net	-1	syz, C	done		3	1949d	2038d	20/29	1771d	35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
linux-next boot error: KASAN: use-after-free Read in page_to_skb net virt	-1				7	1974d	1976d	20/29	1771d	af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
KASAN: use-after-free Read in eth_header_parse_protocol net	19	syz, C	done		1453	1970d	2016d	20/29	1771d	61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
KCSAN: data-race in udp_lib_setsockopt / udpv6_sendmsg net	6				1	1906d	1905d	20/29	1771d	18a419bad63b udp: annotate data races around unix_sk(sk)->gso_size
WARNING: suspicious RCU usage in nf_ct_iterate_cleanup (2) net	4				4	1901d	1960d	20/29	1771d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
WARNING: refcount bug in ip6gre_tunnel_uninit net	13	syz, C	error		10	1996d	1999d	20/29	1771d	7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
KCSAN: data-race in inet_send_prepare / udp_lib_get_port (3) net	6				4	1924d	1927d	20/29	1771d	dcd01eeac144 inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions net	17				2	1949d	1968d	20/29	1771d	821bbf79fe46 ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc net arm-msm	4	syz, C	done	done	544	1957d	2294d	20/29	1771d	3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
KCSAN: data-race in packet_do_bind / packet_getname (5) net	6				4	1919d	1919d	20/29	1771d	e032f7c9c7ce net/packet: annotate accesses to po->ifindex
memory leak in qrtr_create arm-msm net	3	syz, C			3	1875d	2046d	20/29	1771d	52f3456a96c0 net: qrtr: fix memory leaks
memory leak in virtio_transport_send_pkt_info virt kvm net	3	syz, C			2	1983d	2046d	20/29	1771d	8432b8114957 vsock/virtio: free queued packets when closing socket
possible deadlock in ieee80211_tx_frags net	4				1	1972d	1964d	20/29	1771d	1d482e666b8e netlink: disable IRQs for netlink_lock_table()
KCSAN: data-race in __inet_hash_connect / inet_send_prepare (4) net	6				7	1921d	1924d	20/29	1771d	dcd01eeac144 inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
UBSAN: shift-out-of-bounds in choke_change (2) net	-1	syz, C	done		7	1986d	2001d	20/29	1771d	3a87571f0ffc sch_red: fix off-by-one checks in red_check_params()
UBSAN: shift-out-of-bounds in xprt_calc_majortimeo net nfs	-1	syz, C	unreliable		149	1972d	2101d	20/29	1771d	c09f11ef3595 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
INFO: rcu detected stall in tx net	1	syz, C	error	unreliable	3	1838d	1976d	20/29	1771d	30fad76ce4e9 USB: usbtmc: Fix RCU stall warning
WARNING: lock held when returning to user space in sock_setsockopt net	4				1	1898d	1898d	20/29	1771d	271dbc318432 sock: unlock on error in sock_setsockopt()
WARNING: suspicious RCU usage in inet_twsk_purge net	4				10	1894d	1996d	20/29	1771d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
general protection fault in kcm_sendmsg net	19	syz, C	done		7957	1905d	1927d	20/29	1771d	a47c397bb29f revert "net: kcm: fix memory leak in kcm_sendmsg"
WARNING in sk_stream_kill_queues (6) net	-1	syz, C			11376	1771d	1986d	20/29	1771d	144748eb0c44 bpf, sockmap: Fix incorrect fwd_alloc accounting
linux-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb virt net	-1				5	1974d	1975d	20/29	1771d	af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
BUG: MAX_LOCKDEP_CHAINS too low! (2) net	-1	syz, C	error		84838	1771d	2248d	20/29	1771d	5dc33592e955 lockdep: Allow tuning tracing capacity constants.
memory leak in cfserl_create net	3	syz, C			13	2490d	2660d	20/29	1771d	b53558a950a8 net: caif: fix memory leak in caif_device_notify
UBSAN: shift-out-of-bounds in red_adaptative_timer (2) net	-1				28	2001d	2016d	20/29	1771d	e323d865b361 net: sched: validate stab values
memory leak in radix_tree_insert arm-msm net	3	syz, C			1	1996d	1996d	20/29	1771d	8a03dd925786 net: qrtr: Fix memory leak on qrtr_tx_wait failure
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc	19	syz	done		4	1957d	1964d	20/29	1771d	c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING: suspicious RCU usage in tcp_bpf_update_proto bpf net	4	syz, C	done		539	1969d	1989d	20/29	1771d	51e0158a5432 skmsg: Pass psock pointer to ->psock_update_sk_prot()
KCSAN: data-race in __ip4_datagram_connect / skb_set_owner_w (2) net	6				1	1936d	1924d	20/29	1771d	b71eaed8c04f inet: annotate date races around sk->sk_txhash
WARNING: suspicious RCU usage in __copy_msghdr_from_user net	4				1	1937d	1937d	20/29	1771d	3066820034b5 rcu: Reject RCU_LOCKDEP_WARN() false positives
BUG: MAX_STACK_TRACE_ENTRIES too low! (3) net	-1				2	1974d	1975d	20/29	1771d	5dc33592e955 lockdep: Allow tuning tracing capacity constants.
BUG: sleeping function called from invalid context in __ipv6_dev_mc_dec net	5	syz, C	done		21	1904d	1962d	20/29	1771d	a100243d95a6 rtnetlink: avoid RCU read lock when holding RTNL
WARNING: refcount bug in in_dev_finish_destroy net	13	syz, C	unreliable		463	1772d	1999d	20/29	1771d	0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
WARNING in macvlan_process_broadcast net	-1				32053	1771d	2016d	20/29	1771d	dd4fa1dae9f4 macvlan: macvlan_count_rx() needs to be aware of preemption
WARNING: suspicious RCU usage in vxlan_xmit net	4	syz, C	error		1	1913d	1913d	20/29	1771d	85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
linux-next boot error: WARNING: refcount bug in fib_create_info net	-1				3	1870d	1870d	20/29	1771d	28814cd18cd7 ipv4: Fix refcount warning for new fib_info
possible deadlock in br_ioctl_call net	4	syz, C	unreliable		4161	1862d	1872d	20/29	1771d	893b19587534 net: bridge: fix ioctl locking
BUG: sleeping function called from invalid context in _copy_to_iter net	5	syz, C	done		60	1857d	1864d	20/29	1771d	876c14ad014d af_unix: fix holding spinlock in oob handling
UBSAN: array-index-out-of-bounds in taprio_change net	15				2	1855d	1863d	20/29	1771d	efe487fce306 fix array-index-out-of-bounds in taprio_change
memory leak in tcindex_set_parms net	3	syz, C			94	1930d	2416d	20/29	1771d	f5051bcece50 net: sched: fix memory leak in tcindex_partial_destroy_work
general protection fault in sock_from_file net io-uring	2	syz, C	inconclusive		78	1836d	1843d	20/29	1771d	c6d3d9cbd659 io_uring: fix queueing half-created requests
KCSAN: data-race in __skb_try_recv_datagram / sock_setsockopt net	6				1	1906d	1906d	20/29	1771d	0dbffbb5335a net: annotate data race around sk_ll_usec
WARNING: ODEBUG bug in net_dm_cmd_trace net	-1	syz	unreliable		2	2022d	2018d	20/29	1771d	9398e9c0b1d4 drop_monitor: Perform cleanup upon probe registration failure
net-next boot error: WARNING: refcount bug in fib_create_info net	-1				39	1871d	1870d	20/29	1771d	28814cd18cd7 ipv4: Fix refcount warning for new fib_info
UBSAN: shift-out-of-bounds in gred_enqueue net	-1				1	2009d	2009d	20/29	1771d	e323d865b361 net: sched: validate stab values
WARNING in xfrm_alloc_compat (2) net	-1	syz, C	done		47	1987d	1997d	20/29	1771d	ef19e111337f xfrm/compat: Cleanup WARN()s that can be user-triggered
KMSAN: uninit-value in caif_seqpkt_sendmsg net	7	syz, C			2365	1818d	2235d	20/29	1771d	991e634360f2 net: fix uninit-value in caif_seqpkt_sendmsg
memory leak in mrp_request_join net	3	syz, C			215	1911d	2430d	20/29	1771d	996af62167d0 net/802/mrp: fix memleak in mrp_request_join()
net-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb net virt	-1				15	1974d	1978d	20/29	1771d	af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
general protection fault in bond_ipsec_add_sa (2) net	2				1	1899d	1899d	20/29	1771d	105cd17a8660 bonding: fix null dereference in bond_ipsec_add_sa()
memory leak in tcp_cdg_init net	3	syz			6	1936d	2076d	20/29	1771d	be5d1b61a2ad tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
WARNING: refcount bug in sk_psock_get net	13	syz, C	done		8	1958d	1986d	20/29	1771d	8621436671f3 smc: disallow TCP_ULP in smc_setsockopt()
net-next boot error: KASAN: use-after-free Read in page_to_skb net virt	-1				11	1974d	1978d	20/29	1771d	af39c8f72301 virtio-net: fix use-after-free in page_to_skb()
WARNING: refcount bug in ipip6_tunnel_uninit net	13	syz, C	done		199	1994d	1999d	20/29	1771d	6289a98f0817 sit: proper dev_{hold|put} in ndo_[un]init methods
WARNING: refcount bug in register_netdevice net	13	syz, C	unreliable		97	1992d	1999d	20/29	1771d	7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
WARNING: refcount bug in ip6erspan_tunnel_uninit net	13	syz, C	error		11	1996d	1998d	20/29	1771d	7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
UBSAN: shift-out-of-bounds in xfrm_set_default net	-1	syz, C	unreliable		79	1866d	1877d	20/29	1771d	5d8dbb7fb82b net: xfrm: fix shift-out-of-bounce
KMSAN: kernel-infoleak in _copy_to_iter (5) net	9	syz, C			23883	1880d	2317d	20/29	1771d	08c27f3322fe batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
WARNING: locking bug in l2tp_xmit_skb net	4				1	1961d	1961d	20/29	1771d	69e16d01d1de net: fix a concurrency bug in l2tp_tunnel_register()
KMSAN: uninit-value in __dev_mc_add net	7	syz, C			213	2715d	2912d	20/29	1771d	cca8ea3b05c9 net: tun: set tun->dev->addr_len during TUNSETLINK processing
memory leak in kcm_sendmsg net	3	syz, C			2	2267d	2407d	20/29	1771d	c47cc304990a net: kcm: fix memory leak in kcm_sendmsg
UBSAN: shift-out-of-bounds in qdisc_get_rtab net	-1	syz, C	unreliable	done	521	2064d	2109d	20/29	1919d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
memory leak in qrtr_tun_open arm-msm net	3	syz, C			4	2077d	2121d	20/29	1986d	fc0494ead639 net: qrtr: Fix memory leak in qrtr_tun_open
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy net	11	syz, C			115	1989d	2179d	20/29	1986d	396d7f23adf9 net: sched: fix police ext initialization
INFO: task hung in tcf_action_init_1 net	1	syz, C	done		30	2045d	2179d	20/29	1986d	d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
KASAN: slab-out-of-bounds Read in skb_segment net	17	syz, C	error		311	2064d	2068d	20/29	1986d	00b229f762b0 net: fix GSO for SG-enabled devices
upstream test error: INFO: trying to register non-static key in nsim_get_stats64 net	-1				381	2016d	2059d	20/29	1986d	863a42b289c2 netdevsim: init u64 stats for 32bit hardware
INFO: task can't die in connmark_exit_net net	1	syz	error		1	2108d	2104d	20/29	1986d	d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
WARNING in __alloc_skb arm-msm net	-1	syz, C	error		24	2017d	2029d	20/29	1986d	093b036aa94e net/qrtr: fix __netdev_alloc_skb call
WARNING in sk_stream_kill_queues (5) net	-1	syz, C	done		4684	1986d	2116d	20/29	1986d	097b9146c0e2 net: fix up truesize of cloned skb in skb_prepare_for_shift()
WARNING in dst_release net	-1	syz	done		2	2038d	2037d	20/29	1986d	e0be4931f3fe mptcp: reset last_snd on subflow close
KASAN: use-after-free Read in skb_segment net	19	syz, C	error		55	2064d	2068d	20/29	1986d	00b229f762b0 net: fix GSO for SG-enabled devices
UBSAN: shift-out-of-bounds in tcf_police_init net	-1	syz, C	unreliable		8	2065d	2102d	20/29	2015d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
UBSAN: shift-out-of-bounds in est_timer net	-1	syz, C	unreliable		73	2024d	2099d	20/29	2015d	dd5e073381f2 net_sched: gen_estimator: support large ewma log
memory leak in xskq_create bpf net	3	syz, C			7	2082d	2103d	19/29	2016d	8bee68338408 xsk: Fix memory leak for failed bind
UBSAN: shift-out-of-bounds in __detect_linklayer net	-1	syz, C	unreliable	done	31	2065d	2071d	19/29	2016d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
UBSAN: shift-out-of-bounds in tcindex_set_parms net	-1	syz, C	unreliable	done	45	2065d	2100d	19/29	2016d	bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
general protection fault in taprio_dequeue_soft net	2	syz, C	done		2	2101d	2101d	19/29	2016d	44d4775ca518 net/sched: sch_taprio: reset child qdiscs before freeing them
kernel BUG at net/core/dev.c:NUM! net	-1	syz, C	done		35	2070d	2072d	19/29	2016d	47e4bb147a96 net: sit: unregister_netdevice on newlink's error path
KASAN: use-after-free Read in decode_session6 net	19	syz, C	done		152	2063d	2270d	19/29	2016d	0356010d825e sctp: bring inet(6)_skb_parm back to sctp_input_cb
divide error in __tcp_select_window net	2	syz, C	done		1119	2120d	2125d	19/29	2016d	fd8976790a6c mptcp: be careful on MPTCP-level ack.
KMSAN: uninit-value in INET_ECN_decapsulate net	7				3	2083d	2116d	19/29	2016d	4179b00c04d1 geneve: pull IP header before ECN decapsulation
UBSAN: shift-out-of-bounds in choke_enqueue net	-1	syz, C	inconclusive		3853	2016d	2109d	19/29	2016d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
WARNING: suspicious RCU usage in tcp_disconnect net	4	syz, C	done		25	2070d	2072d	19/29	2016d	13a9499e8333 mptcp: fix locking in mptcp_disconnect()
KMSAN: uninit-value in __nla_validate_parse (2) net	7	syz, C			2	2078d	2074d	19/29	2016d	c96adff95619 cls_flower: call nla_ok() before nla_next()
general protection fault in xsk_recvmsg bpf net	2	syz, C	done	unreliable	1800	2101d	2070d	19/29	2016d	3546b9b8eced xsk: Validate socket state in xsk_recvmsg, prior touching socket members
UBSAN: shift-out-of-bounds in sfq_init net	-1	syz, C	unreliable		8	2079d	2093d	19/29	2016d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KMSAN: uninit-value in gre_parse_header net	7	syz, C			9283	2044d	2642d	19/29	2016d	085c7c4e1c0e erspan: fix version 1 check in gre_parse_header()
UBSAN: shift-out-of-bounds in red_adaptative_timer net	-1	syz, C	unreliable		260	2017d	2109d	19/29	2016d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KASAN: slab-out-of-bounds Write in xfrm_attr_cpy32 net	21	syz, C	done		106	2106d	2154d	19/29	2016d	d1949d045fd6 xfrm/compat: memset(0) 64-bit padding at right place
UBSAN: shift-out-of-bounds in __red_change net	-1	syz, C	unreliable		24	2019d	2108d	19/29	2016d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KASAN: use-after-free Read in rxrpc_get_skb afs net	19				1	2064d	2060d	19/29	2016d	7b5eab57cac4 rxrpc: Fix clearance of Tx/Rx ring when releasing a call
UBSAN: shift-out-of-bounds in gred_change net	-1	syz, C	unreliable		5	2030d	2084d	19/29	2016d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
memory leak in rxrpc_lookup_local net afs	3	syz, C			1415	2056d	2520d	19/29	2016d	b8323f7288ab rxrpc: Fix memory leak in rxrpc_lookup_local
WARNING in xfrm_alloc_compat net	-1	syz, C	done		130	2029d	2151d	19/29	2016d	dbd7ae5154d5 xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
UBSAN: shift-out-of-bounds in red_enqueue net	-1	syz, C	unreliable		4906	2016d	2109d	19/29	2016d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KMSAN: kernel-infoleak in move_addr_to_user (4) net	9	syz, C			59	2023d	2075d	19/29	2016d	b42b3a2744b3 can: isotp: isotp_getname(): fix kernel information leak
UBSAN: shift-out-of-bounds in strset_parse_request net	-1	syz, C	done		16	2079d	2103d	19/29	2016d	efb796f5571f ethtool: fix string set id check
UBSAN: shift-out-of-bounds in cbq_dequeue net	-1	syz, C	unreliable		27	2065d	2109d	19/29	2016d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
KASAN: stack-out-of-bounds Write in bitmap_from_arr32 net	21	syz, C	done		2	2119d	2116d	19/29	2016d	a770bf515613 ethtool: fix stack overflow in ethnl_parse_bitset()
KASAN: use-after-free Read in rxrpc_send_data_packet net afs	19				1	2059d	2053d	19/29	2016d	7b5eab57cac4 rxrpc: Fix clearance of Tx/Rx ring when releasing a call
KASAN: use-after-free Read in dump_schedule net	19	syz, C	done	done	7	2093d	2204d	19/29	2016d	cc00bcaa5899 netfilter: x_tables: Switch synchronization to RCU
KASAN: use-after-free Read in eth_type_trans net	19	syz, C	done	error	3	2316d	2459d	15/29	2093d	96aa1b22bd6b tun: correct header offsets in napi frags mode
BUG: MAX_LOCKDEP_KEYS too low! net	-1	syz, C	done	error	3496	2272d	2516d	15/29	2107d	1a33e10e4a95 net: partially revert dynamic lockdep key changes
general protection fault in xsk_release bpf net	2	syz, C	done		2	2182d	2182d	15/29	2130d	1fd17c8cd0aa xsk: Fix possible crash in socket_release when out-of-memory
KASAN: use-after-free Write in tcindex_change net	22	syz, C	done	done	4	2373d	2373d	15/29	2130d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
possible deadlock in cleanup_net net	4	syz, C	done		281	2199d	2207d	15/29	2130d	d966ddcc3821 tipc: fix a deadlock when flushing scheduled work
KMSAN: uninit-value in ip_tunnel_xmit (2) net	7	syz, C			11778	2134d	2959d	15/29	2130d	fdafed459998 ip_gre: set dev->hard_header_len and dev->needed_headroom properly
INFO: rcu detected stall in ip_list_rcv net	1	syz, C	error	done	3	2178d	2204d	15/29	2130d	1d0e850a49a5 afs: Fix cell removal
general protection fault in tcf_generic_walker net	2	syz			9	2177d	2179d	15/29	2130d	580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
KMSAN: uninit-value in unix_find_other net	7	syz, C			57	2175d	2991d	15/29	2130d	7ca1db21ef8e net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
INFO: task hung in ctrl_getfamily net	1	syz	done	done	22	2223d	2836d	15/29	2130d	47733f9daf4f tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
WARNING: suspicious RCU usage in qrtr_ns_worker arm-msm net	4	syz, C	done		1	2211d	2274d	15/29	2130d	a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
WARNING in rxrpc_recvmsg afs net	-1	syz, C	error	done	5	2265d	2265d	15/29	2130d	65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
KASAN: use-after-free Read in tcf_action_init net	19	syz, C	done		1	2182d	2179d	15/29	2130d	0fedc63fadf0 net_sched: commit action insertions together
KASAN: slab-out-of-bounds Read in strset_parse_request net	17	syz, C	error		141	2169d	2169d	15/29	2130d	db972e532518 ethtool: strset: allow ETHTOOL_A_STRSET_COUNTS_ONLY attr
KASAN: stack-out-of-bounds Read in xfrm_selector_match (2) net	17				1	2188d	2186d	15/29	2130d	e94ee171349d xfrm: Use correct address family in xfrm_state_find
BUG: unable to handle kernel paging request in tcf_action_dump_terse net	8	syz, C	done		15	2173d	2179d	15/29	2130d	580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
INFO: task hung in lock_sock_nested (3) net	1	syz, C	done		5	2173d	2175d	15/29	2130d	d9fb8c507d42 mptcp: fix infinite loop on recvmsg()/worker() race.
kernel BUG at net/rxrpc/conn_object.c:LINE! net afs	-1	syz, C	done		855	2132d	2197d	15/29	2130d	546a42410bf7 rxrpc: Fix conn bundle leak in net-namespace exit
possible deadlock in dev_uc_sync net	4	syz, C	done		3	2165d	2263d	15/29	2130d	0e8b8d6a2d85 net: core: use list_del_init() instead of list_del() in netdev_run_todo()
general protection fault in rt6_fill_node net	2	syz, C	done	done	3	2214d	2212d	15/29	2130d	eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
memory leak in __team_options_register net	3	syz, C			1	2200d	2199d	15/29	2130d	9a9e77495958 net: team: fix memory leak in __team_options_register
general protection fault in nexthop_is_blackhole net	2	syz, C	done	done	1	2215d	2212d	15/29	2130d	eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KASAN: use-after-free Write in xp_put_pool bpf net	22	syz, C	done		50	2183d	2205d	15/29	2130d	83cf5c68d663 xsk: Fix use-after-free in failed shared_umem bind
WARNING in nla_get_range_unsigned net	-1	syz, C	done		63	2205d	2207d	15/29	2130d	c30a3c957c88 netlink: policy: correct validation type check
general protection fault in xsk_is_setup_for_bpf_map net bpf	2	syz, C	error		294	2182d	2205d	15/29	2130d	968be23ceaca xsk: Fix possible segfault at xskmap entry insertion
inconsistent lock state in icmp_send net	4	syz	done	done	1	2337d	2835d	15/29	2130d	1378817486d6 tipc: block BH before using dst_cache
INFO: task can't die in rtnetlink_rcv_msg net	1				5	2170d	2179d	15/29	2130d	0fedc63fadf0 net_sched: commit action insertions together
KASAN: use-after-free Write in rxrpc_put_bundle afs net	22	syz, C	done		229	2168d	2191d	15/29	2130d	f3af4ad1e08a rxrpc: Fix bundle counting for exclusive connections
KASAN: use-after-free Read in tcf_action_destroy net	19	syz, C	done		8	2172d	2187d	15/29	2130d	0fedc63fadf0 net_sched: commit action insertions together
memory leak in xdp_umem_create bpf net	3	syz, C			17	2134d	2154d	15/29	2130d	e5e1a4bc916d xsk: Fix possible memory leak at socket close
general protection fault in xsk_diag_dump (2) bpf net	2	syz, C			354	2187d	2205d	15/29	2130d	53ea2076d851 xsk: Fix possible segfault in xsk umem diagnostics
general protection fault in tcf_action_destroy (2) net	2	syz, C	done	done	29	2167d	2380d	15/29	2130d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
WARNING: suspicious RCU usage in ctrl_cmd_new_lookup net arm-msm	4	syz, C	done	done	10	2185d	2274d	15/29	2130d	a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
WARNING: suspicious RCU usage in fib6_del (2) net	4				1	2199d	2199d	15/29	2167d	843d926b003e ipv6: avoid lockdep issue in fib6_del()
KASAN: use-after-free Write in skb_queue_tail arm-msm net	22				1	2199d	2199d	15/29	2167d	3ca1a42a52ca net: qrtr: check skb_put_padto() return value
possible deadlock in peernet2id_alloc net	4				12	2198d	2370d	15/29	2167d	e1f469cd5866 Revert "netns: don't disable BHs when locking "nsid_lock""
KMSAN: uninit-value in __inet_diag_dump net	7	syz, C			37	2169d	2186d	15/29	2167d	d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
INFO: task hung in tcf_ife_init net	1	syz, C	done		4	2199d	2204d	15/29	2167d	cc8e58f8325c act_ife: load meta modules before tcf_idr_check_alloc()
KMSAN: uninit-value in inet_diag_cmd_exact net	7	syz, C			31	2168d	2180d	15/29	2167d	d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
general protection fault in free_netdev net	2	syz, C	error	done	3605	2243d	2278d	15/29	2175d	46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
KMSAN: kernel-infoleak in move_addr_to_user (3) net	9	syz, C			79	2191d	2225d	15/29	2179d	38ba8b9241f5 can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
WARNING: refcount bug in red_destroy net	13	syz, C	done		1	2213d	2212d	15/29	2182d	5438dd45831e net_sched: fix error path in red_init()
WARNING: refcount bug in qdisc_put (2) net	13	syz, C	done		7	2212d	2212d	15/29	2182d	5438dd45831e net_sched: fix error path in red_init()
KASAN: use-after-free Write in __linkwatch_run_queue net	22	syz, C	error		24	2245d	2246d	15/29	2190d	c75d1d5248c0 bonding: check return value of register_netdevice() in bond_newlink()
KASAN: use-after-free Read in sock_def_write_space (2) arm-msm net	19	syz, C	error		29	2191d	2248d	15/29	2190d	af9f691f0f5b qrtr: orphan socket in qrtr_release()
kernel BUG at net/rxrpc/recvmsg.c:LINE! afs net	-1	syz, C	error		10	2237d	2265d	15/29	2190d	65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
WARNING in idr_alloc arm-msm net	-1	syz, C	done		65	2200d	2274d	15/29	2190d	8dfddfb79653 net: qrtr: fix usage of idr in port assignment to socket
general protection fault in fib_dump_info (2) net	2	syz, C	done		16	2214d	2217d	15/29	2190d	eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KMSAN: uninit-value in netlink_policy_dump_start net	7	syz, C			31	2196d	2199d	15/29	2190d	d1fb55592909 netlink: fix state reallocation in policy export
KASAN: use-after-free Read in devlink_health_reporter_destroy net	19	syz, C	error		1188	2255d	2255d	15/29	2190d	5d037b4d3df7 devlink: Fix use-after-free when destroying health reporters
kernel BUG at net/core/dev.c:LINE! (3) net	-1	syz, C	done		979	2205d	2349d	15/29	2190d	832707021666 bonding: fix a potential double-unregister
general protection fault in vsock_poll net virt	2	syz	done		15	2235d	2247d	15/29	2190d	1980c0584483 vsock: fix potential null pointer dereference in vsock_poll()
KMSAN: uninit-value in geneve_xmit net	7	syz, C			163	2194d	2247d	15/29	2190d	32818c075c54 geneve: fix an uninitialized value in geneve_changelink()
KASAN: wild-memory-access Read in rawv6_setsockopt net	17				2	2232d	2232d	15/29	2190d	519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
KASAN: use-after-free Read in __xfrm6_tunnel_spi_lookup net	19	syz, C	error		12	2249d	2254d	15/29	2190d	8b404f46dd6a xfrm: interface: not xfrmi_ipv6/ipip_handler twice
INFO: trying to register non-static key in red_destroy net	-1	syz, C	error		318	2242d	2264d	15/29	2190d	608b4adab178 net_sched: initialize timer earlier in red_init()
KASAN: wild-memory-access Read in ip_setsockopt net	17	syz, C			2	2225d	2225d	15/29	2190d	519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
WARNING: suspicious RCU usage in bond_ipsec_add_sa net	4				214	2192d	2263d	15/29	2190d	f548a476268d bonding: don't need RTNL for ipsec helpers
possible deadlock in dev_mc_unsync net	4	syz, C	error	done	78	2257d	2273d	15/29	2219d	be74294ffa24 net: get rid of lockdep_set_class_and_subclass()
WARNING: locking bug in try_to_grab_pending net	4	syz	error	done	1	2309d	2772d	15/29	2220d	1378817486d6 tipc: block BH before using dst_cache
general protection fault in qrtr_endpoint_post net arm-msm	2	syz, C	done	done	54	2257d	2275d	15/29	2226d	8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
WARNING in xfrm_policy_insert net	-1	syz, C	inconclusive	done	6	2283d	3136d	15/29	2241d	ed17b8d377ea xfrm: fix a warning in xfrm_policy_insert_list
KASAN: use-after-free Read in sock_def_write_space arm-msm net	19	syz, C	done		67	2249d	2615d	15/29	2249d	a9b111016235 llc: make sure applications use ARPHRD_ETHER
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post arm-msm net	17	syz, C			8	2271d	2272d	15/29	2249d	8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
memory leak in qdisc_create_dflt net	3	syz, C			1	2268d	2264d	15/29	2249d	306381aec7c2 net_sched: fix a memory leak in atm_tc_init()
WARNING in hsr_dev_finalize net	-1	syz, C	error		1546	2257d	2273d	15/29	2249d	ccfc9df1352b hsr: fix interface leak in error path of hsr_dev_finalize()
kernel BUG at net/l2tp/l2tp_core.c:LINE! net	-1	syz, C			10	2274d	2269d	15/29	2249d	c9a368f1c0fb bpf: net: Avoid incorrect bpf_sk_reuseport_detach call
possible deadlock in dev_uc_sync_multiple (2) net	4				26	2259d	2270d	15/29	2249d	be74294ffa24 net: get rid of lockdep_set_class_and_subclass()
KASAN: use-after-free Read in devlink_get_from_attrs net	19	syz, C			25	2257d	2270d	15/29	2249d	bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in ip_icmp_error net	19	syz, C	done		14	2303d	2304d	15/29	2252d	239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
KASAN: slab-out-of-bounds Read in ip_icmp_error net	17	syz, C	done		13	2303d	2304d	15/29	2252d	239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
WARNING: proc registration bug in snmp6_register_dev net	-1	syz, C	done		14	2279d	2345d	15/29	2252d	de0083c7ed7d hsr: avoid to create proc file after unregister
KASAN: use-after-free Read in inet_diag_bc_sk net	19	syz, C	done		30	2327d	2329d	15/29	2252d	ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
linux-next boot error: WARNING: suspicious RCU usage in ipmr_get_table net	-1				60	2324d	2332d	15/29	2252d	7013908c2db2 ipmr: Add lockdep expression to ipmr_for_each_table macro
BUG: unable to handle kernel NULL pointer dereference in dev_ifconf net	10				1	2282d	2282d	15/29	2252d	3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: using smp_processor_id() in preemptible [ADDR] code: /NUM net	4				1	2309d	2309d	15/29	2252d	1378817486d6 tipc: block BH before using dst_cache
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (3) net	21				1	2302d	2302d	15/29	2252d	d9a81a225277 l2tp: add sk_family checks to l2tp_validate_socket
KMSAN: uninit-value in tbf_enqueue net	7				21	2252d	2339d	15/29	2252d	9274124f023b net: stricter validation of untrusted gso packets
general protection fault in fq_codel_enqueue net	2	syz, C	done		25	2256d	2341d	15/29	2252d	9274124f023b net: stricter validation of untrusted gso packets
general protection fault in put_cmsg net	2	syz, C	done		3	2317d	2317d	15/29	2252d	1b2f08df0a88 ipv6: set msg_control_is_user in do_ipv6_getsockopt
KASAN: slab-out-of-bounds Read in inet_diag_bc_sk net	17	syz, C	done		45	2327d	2329d	15/29	2252d	ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
BUG: unable to handle kernel NULL pointer dereference in debug_smp_processor_id (2) net	10				3	2274d	2281d	15/29	2252d	3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
BUG: unable to handle kernel NULL pointer dereference in net_rx_queue_update_kobjects net	10				1	2282d	2282d	15/29	2252d	3021e69219e2 kcov: check kcov_softirq in kcov_remote_stop()
general protection fault in erspan_validate net	2	syz, C	done		520	2317d	2324d	15/29	2252d	51fa960d3b51 erspan: Check IFLA_GRE_ERSPAN_VER is set.
general protection fault in inet_unhash net	2	syz, C	done		40	2273d	2302d	15/29	2252d	02c71b144c81 l2tp: do not use inet_hash()/inet_unhash()
linux-next boot error: WARNING: suspicious RCU usage in bpq_device_event net	-1				6	2315d	2316d	15/29	2252d	95f59bf88bb7 drivers: net: hamradio: Fix suspicious RCU usage warning in bpqether.c
KASAN: use-after-free Read in rpc_net_ns net nfs	19	syz	done		10	2317d	2323d	15/29	2252d	31e9a7f35352 SUNRPC: fix use-after-free in rpc_free_client_work()
general protection fault in skb_clone (3) net	2				44	2302d	2304d	15/29	2252d	239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
KMSAN: uninit-value in do_tcp_getsockopt net	7				5	2264d	2316d	15/29	2252d	e776af608f69 net-backports: tcp: fix error recovery in tcp_zerocopy_receive()
linux-next test error: WARNING: suspicious RCU usage in ipmr_device_event net	-1				24	2334d	2339d	15/29	2252d	a14fbcd4f157 ipmr: Fix RCU list debugging warning
memory leak in genl_rcv_msg net	3	syz, C			116	2287d	2477d	15/29	2252d	c36f05559104 genetlink: fix memory leaks in genl_family_rcv_msg_dumpit()
KASAN: slab-out-of-bounds Read in fl6_update_dst net	17	syz, C	done		43	2273d	2319d	15/29	2252d	bb986a50421a seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds
general protection fault in sock_hash_free bpf net	2				1	2296d	2296d	15/29	2252d	75e68e5bf2c7 bpf, sockhash: Synchronize delete from bucket list on map free
KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen net	17	syz, C	done		4	2322d	2341d	15/29	2252d	9274124f023b net: stricter validation of untrusted gso packets
WARNING: locking bug in dev_mc_seq_show net	4	syz, C	done		3	2293d	2304d	15/29	2252d	845e0ebb4408 net: change addr_list_lock back to static key
general protection fault in inet_diag_bc_sk net	2				12	2327d	2329d	15/29	2252d	ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
KMSAN: uninit-value in skbprio_enqueue net	7	syz			11	2266d	2330d	15/29	2252d	2761121af87d net_sched: sch_skbprio: add message validation to skbprio_change()
INFO: rcu detected stall in wg_packet_tx_worker net	1	syz, C	done		24	2281d	2334d	15/29	2252d	df4953e4e997 sch_sfq: validate silly quantum values
KCSAN: data-race in tcp_add_backlog / tcp_try_rmem_schedule net	6				3	2531d	2535d	15/29	2269d	ebb3b78db7bf tcp: annotate sk->sk_rcvbuf lockless reads
WARNING in sk_stream_kill_queues (4) net	-1	syz, C	done	done	6	2391d	2395d	15/29	2269d	b6f6118901d1 ipv6: restrict IPV6_ADDRFORM operation
WARNING in kfree (2) net	-1	syz	done	done	1	2381d	2380d	15/29	2271d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KMSAN: uninit-value in etf_enqueue_timesortedlist net	7				3	2322d	2329d	15/29	2281d	a1211bf9a777 sched: etf: do not assume all sockets are full blown
general protection fault in macvlan_device_event net	2				86	2330d	2344d	15/29	2281d	4dee15b4fd0d macvlan: fix null dereference in macvlan_device_event()
KASAN: use-after-free Read in report_sock_error net	19				2	2334d	2339d	15/29	2281d	a1211bf9a777 sched: etf: do not assume all sockets are full blown
KASAN: use-after-free Write in tcindex_set_parms net	22	syz, C	done		13	2361d	2380d	15/29	2320d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Read in tcindex_dump net	19	syz			1	2383d	2380d	15/29	2320d	b1be2e8cd290 net_sched: hold rtnl lock in tcindex_partial_destroy_work()
general protection fault in macsec_upd_offload net	2	syz, C	done		5	2358d	2358d	15/29	2320d	aa81700cf232 macsec: fix NULL dereference in macsec_upd_offload()
general protection fault in hfsc_unbind_tcf net	2				1	2372d	2368d	15/29	2320d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING in geneve_exit_batch_net (2) net	-1	syz, C	done		9	2367d	2391d	15/29	2320d	0fda7600c2e1 geneve: move debug check after netdev unregister
KASAN: invalid-free in tcf_exts_destroy net	24	syz, C	done		1	2383d	2383d	15/29	2320d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
general protection fault in do_tcp_getsockopt (2) net	2	syz, C	done		1	2372d	2372d	15/29	2320d	6cd6cbf593bf net-backports: tcp: repair: fix TCP_QUEUE_SEQ implementation
WARNING: refcount bug in __tcf_action_put net	13	syz			1	2381d	2380d	15/29	2320d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
general protection fault in ethnl_parse_header net	2	syz, C	done		9	2367d	2372d	15/29	2320d	55b474c41e58 netlink: check for null extack in cookie helpers
general protection fault in hsr_addr_is_self (2) net	2				1	2371d	2371d	15/29	2320d	3a303cfdd28d hsr: fix general protection fault in hsr_addr_is_self()
WARNING: ODEBUG bug in __init_work net	-1	syz	done		1	2368d	2368d	15/29	2320d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING in call_rcu net	-1	syz, C	done		8	2374d	2381d	15/29	2320d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING: ODEBUG bug in tcf_queue_work net	-1	syz, C	done		30	2386d	2386d	15/29	2320d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
general protection fault in qdisc_hash_add net	2	syz, C	done		47	2378d	2379d	15/29	2320d	7c4046b1c53b Revert "net: sched: make newly activated qdiscs visible"
WARNING: refcount bug in tcindex_data_put net	13	syz, C	done		27	2356d	2358d	15/29	2320d	a8eab6d35e22 net_sched: fix a missing refcnt in tcindex_init()
KASAN: use-after-free Read in route4_get net	19	syz, C			8	2348d	2378d	15/29	2320d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
general protection fault in erspan_netlink_parms net	2	syz, C	done		5	2375d	2375d	15/29	2320d	32ca98feab8c net: ip_gre: Accept IFLA_INFO_DATA-less configuration
KMSAN: uninit-value in tcf_exts_change net	7	syz, C			5	2371d	2380d	15/29	2320d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
BUG: sleeping function called from invalid context in kmem_cache_alloc_node_trace net	5	syz, C	done		364	2382d	2384d	15/29	2320d	138470a9b2cc net/sched: act_ct: fix lockdep splat in tcf_ct_flow_table_get
WARNING: ODEBUG bug in tcindex_destroy_work (3) net	-1	syz	done		13	2359d	2395d	15/29	2320d	304e024216a8 net_sched: add a temporary refcnt for struct tcindex_data
KMSAN: uninit-value in macsec_handle_frame net	7				1	2370d	2370d	15/29	2320d	b06d072ccc4b macsec: restrict to ethernet devices
WARNING: refcount bug in igmp_start_timer net	13	syz	done	done	19	2585d	2951d	15/29	2343d	323ebb61e32b net: use listified RX for handling GRO_NORMAL skbs
possible deadlock in sch_direct_xmit net	4	syz, C	done	done	1548	2486d	3165d	15/29	2343d	323ebb61e32b net: use listified RX for handling GRO_NORMAL skbs
KASAN: use-after-free Read in alloc_netdev_mqs net	19				1	2406d	2406d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: uninit-value in __iptunnel_pull_header net	7	syz, C			12	2376d	2385d	15/29	2345d	17c25cafd4d3 gre: fix uninit-value in __iptunnel_pull_header
KASAN: use-after-free Read in inet_gifconf net	19				24	2398d	2405d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: use-after-free Read in ipv6_get_ifaddr net	19				1	2402d	2402d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KASAN: use-after-free Read in inet_lookup_ifaddr_rcu net	19				2	2398d	2401d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: use-after-free in netdev_state_change net	18				2	2389d	2389d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: use-after-free Read in rtnl_fill_ifinfo (2) net	19				2	2403d	2405d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KMSAN: uninit-value in slhc_compress net	7	syz, C			3	2387d	2387d	15/29	2345d	110a40dfb708 slip: make slhc_compress() more robust against malicious packets
KASAN: use-after-free Read in netdev_state_change net	19				2	2403d	2404d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
BUG: unable to handle kernel NULL pointer dereference in inet_release net	10	syz			3	2394d	2395d	15/29	2345d	b6f6118901d1 ipv6: restrict IPV6_ADDRFORM operation
BUG: unable to handle kernel paging request in ethnl_update_bitset32 net	8	syz, C			168	2385d	2396d	15/29	2345d	e34f1753eebc ethtool: limit bitset size
KASAN: use-after-free Read in ipv6_chk_addr_and_flags net	19				1	2404d	2404d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: use-after-free in find_match net	18	syz, C			52	2375d	2404d	15/29	2345d	e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: uninit-value in bpf_skb_load_helper_32_no_cache bpf net	7				2	2415d	2413d	15/29	2345d	457fed775c97 net/smc: fix leak of kernel memory to user space
KMSAN: uninit-value in bond_alb_xmit net	7	syz			3	2385d	2387d	15/29	2345d	b7469e83d2ad bonding/alb: make sure arp header is pulled before accessing it
KMSAN: use-after-free in inet_gifconf net	18				10	2375d	2398d	15/29	2345d	e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: use-after-free in ip6_dst_destroy net	18	syz, C			2	2378d	2390d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
possible deadlock in inet_csk_accept net	4	syz, C	done		992	2379d	2380d	15/29	2345d	06669ea346e4 net: memcg: fix lockdep splat in inet_csk_accept()
KASAN: slab-out-of-bounds Read in ethnl_update_bitset32 net	17	syz			2	2390d	2396d	15/29	2345d	e34f1753eebc ethtool: limit bitset size
KASAN: use-after-free Read in dev_get_by_index_rcu net	19				1	2399d	2399d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
possible deadlock in bond_get_stats (3) net	4	syz	done		2	2399d	2399d	15/29	2345d	b3e80d44f5b1 bonding: fix lockdep warning in bond_get_stats()
KMSAN: use-after-free in veth_xmit net	18				8	2375d	2390d	15/29	2345d	e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: uninit-value in kstrdup net	7	syz, C			8	2381d	2408d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: use-after-free Read in ethnl_update_bitset32 net	19	syz, C	done		6	2388d	2396d	15/29	2345d	e34f1753eebc ethtool: limit bitset size
KASAN: use-after-free Read in fib_nexthop_info net	19				1	2404d	2404d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: slab-out-of-bounds Read in inet_gifconf net	17				2	2404d	2405d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: use-after-free Read in ip6_dst_destroy net	19	syz, C	done		1	2404d	2404d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: use-after-free Read in l3mdev_master_ifindex_rcu net	19	syz, C	done	done	13	2401d	2406d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
kernel panic: stack is corrupted in vhost_net_ioctl kvm net virt	2	syz, C	done		2	2405d	2491d	15/29	2345d	42d84c8490f9 vhost: Check docket sk_family instead of call getname
KASAN: use-after-free Read in __neigh_notify net	19				2	2403d	2404d	15/29	2345d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr lsm net	10	syz, C	done		8	2385d	2395d	15/29	2345d	dc24f8b4ecd3 mptcp: add dummy icsk_sync_mss()
INFO: task hung in lock_sock_nested (2) net virt kvm	1	syz, C	done		418	2385d	2398d	15/29	2345d	3f74957fcbea vsock: fix potential deadlock in transport->release()
KMSAN: use-after-free in l3mdev_master_ifindex_rcu net	18	syz, C			5	2375d	2398d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: use-after-free in dev_alloc_name_ns net	18				3	2375d	2389d	15/29	2345d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KASAN: use-after-free Read in mld_in_v1_mode net	19	syz, C	done		3	2403d	2406d	15/29	2345d	e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
BUG: unable to handle kernel paging request in slhc_free net	8	syz, C	done	done	177	2701d	2818d	15/29	2379d	baf76f0c58ae slip: make slhc_free() silently accept an error pointer
KMSAN: uninit-value in setup_udp_tunnel_sock net	7	syz, C			1	2430d	2430d	15/29	2402d	940ba1498665 net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
WARNING: lock held when returning to user space in tun_get_user (2) net	4				7	2418d	2429d	15/29	2402d	1efba987c486 net-backports: tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
WARNING in devlink_port_type_warn net	-1				2340	2432d	2504d	15/29	2402d	4c582234ab39 devlink: Wait longer before warning about unset port type
KMSAN: uninit-value in rsvp_change net	7	syz, C			4	2422d	2423d	15/29	2402d	cb3c0e6bdf64 cls_rsvp: fix rsvp_policy
BUG: unable to handle kernel paging request in rhashtable_replace_fast net	8				2	2428d	2435d	15/29	2402d	41cdc741048b netdevsim: fix nsim_fib6_rt_create() error path
general protection fault in hsr_addr_is_self net	2				3	2404d	2419d	15/29	2402d	2b5b8251bc9f net: hsr: fix possible NULL deref in hsr_handle_frame()
INFO: rcu detected stall in addrconf_rs_timer (3) net	1	syz, C	inconclusive	done	81	2462d	2458d	15/29	2402d	d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (2) net	21	syz, C	done		8	2428d	2430d	15/29	2402d	940ba1498665 net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
BUG: sleeping function called from invalid context in lock_sock_nested net bpf	5	syz, C			1232	2402d	2477d	15/29	2402d	37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
memory leak in vlan_dev_set_egress_priority net	3	syz, C			1	2444d	2444d	15/29	2402d	9bbd917e0bec vlan: fix memory leak in vlan_dev_set_egress_priority
WARNING in sk_psock_drop net bpf	-1				157	2425d	2434d	15/29	2402d	58c8db929db1 net, sk_msg: Don't check if sock is locked when tearing down psock
KMSAN: uninit-value in macvlan_broadcast net	7	syz, C			2	2444d	2445d	15/29	2402d	96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING in tcp_ack net	-1	syz, C	done		3	2442d	2443d	15/29	2402d	90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
memory leak in em_nbyte_change net	3	syz, C			1	2427d	2426d	15/29	2402d	55cd9f67f1e4 net_sched: ematch: reject invalid TCF_EM_SIMPLE
KCSAN: data-race in __skb_try_recv_from_queue / unix_dgram_sendmsg net	6				61	2417d	2436d	15/29	2402d	86b18aaa2b5b skbuff: fix a data race in skb_queue_len()
KASAN: slab-out-of-bounds Read in macvlan_broadcast net	17	syz, C	done		10	2442d	2445d	15/29	2402d	96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KASAN: slab-out-of-bounds Read in nla_put_nohdr net	17	syz, C	done		1	2429d	2429d	15/29	2402d	61678d28d4a4 net_sched: fix datalen for ematch
WARNING: bad unlock balance in release_sock net	4				1	2443d	2443d	15/29	2402d	90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
KASAN: use-after-free Read in tcp_fastretrans_alert net	19	syz, C	done		1	2433d	2433d	15/29	2402d	2bec445f9bf3 net-backports: tcp: do not leave dangling pointers in tp->highest_sack
BUG: unable to handle kernel paging request in rhashtable_jhash2 net	8	syz, C	done		6	2435d	2436d	15/29	2402d	41cdc741048b netdevsim: fix nsim_fib6_rt_create() error path
memory leak in tcf_ctinfo_init net	3	syz, C			2	2431d	2433d	15/29	2402d	09d4f10a5e78 net: sched: act_ctinfo: fix memory leak
KASAN: slab-out-of-bounds Read in __nla_put_nohdr net	17	syz, C	done		4	2429d	2430d	15/29	2402d	61678d28d4a4 net_sched: fix datalen for ematch
INFO: rcu detected stall in br_handle_frame (2) net	1	syz, C	done		2	2462d	2458d	15/29	2402d	d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
INFO: rcu detected stall in netlink_sendmsg (3) net	1	syz, C	done		6	2409d	2462d	15/29	2402d	d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
WARNING in cbq_destroy_class net	-1	syz, C	done		7	2407d	2430d	15/29	2402d	2e24cd755552 net_sched: fix ops->bind_class() implementations
WARNING in cbq_destroy net	-1	syz, C	done		1	2429d	2429d	15/29	2402d	2e24cd755552 net_sched: fix ops->bind_class() implementations
KASAN: use-after-free Read in tcp_check_sack_reordering net	19	syz, C	done		2	2424d	2433d	15/29	2402d	2bec445f9bf3 net-backports: tcp: do not leave dangling pointers in tp->highest_sack
KASAN: use-after-free Read in macvlan_broadcast net	19	syz, C	done		12	2443d	2445d	15/29	2402d	96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING: bad unlock balance in gtp_encap_enable_socket net	4	syz, C	done		8	2441d	2445d	15/29	2402d	90d72256addf net-backports: gtp: fix bad unlock balance in gtp_encap_enable_socket
WARNING: bad unlock balance in sch_direct_xmit net	4	syz, C	done		35	2432d	2479d	15/29	2402d	53d374979ef1 net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()
general protection fault in inet6_set_link_af net	2	syz, C	done		8	2411d	2415d	15/29	2402d	db3fa271022d ipv6/addrconf: fix potential NULL deref in inet6_set_link_af()
general protection fault in tcf_ife_cleanup net	2	syz, C	done		111	2416d	2440d	15/29	2402d	44c23d71599f net/sched: act_ife: initalize ife->metalist earlier
KASAN: use-after-free Write in __alloc_skb (2) net	22	syz, C	done		7	2453d	2469d	15/29	2402d	d836f5c69d87 net-backports: net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
WARNING in geneve_exit_batch_net net	-1				15	2402d	2427d	15/29	2402d	760d228e322e net_sched: walk through all child classes in tc_bind_tclass()
KASAN: slab-out-of-bounds Read in tcf_exts_destroy net	17	syz, C	done	error	8	2524d	2427d	15/29	2402d	599be01ee567 net_sched: fix an OOB access in cls_tcindex
WARNING: ODEBUG bug in tcindex_destroy_work (2) net	-1				5	2407d	2417d	15/29	2402d	599be01ee567 net_sched: fix an OOB access in cls_tcindex
inconsistent lock state in rxrpc_put_client_connection_id afs net	4	syz, C	done		473	2410d	2416d	15/29	2402d	963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
KASAN: null-ptr-deref Read in tcf_generic_walker net	11	syz, C	done		6	2406d	2424d	15/29	2402d	760d228e322e net_sched: walk through all child classes in tc_bind_tclass()
WARNING in tcp_enter_loss (2) net	-1	syz, C	done	unreliable	4	3060d	3110d	15/29	2402d	16ae6aa17052 tcp: ignore Fast Open on repair mode
KMSAN: uninit-value in bond_neigh_setup net	7				64	2451d	2475d	15/29	2406d	f394722fb0d0 net-backports: neighbour: remove neigh_cleanup() method
KASAN: slab-out-of-bounds Read in hsr_debugfs_rename net	17	syz, C	done		18	2445d	2454d	15/29	2406d	04b69426d846 hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename()
BUG: corrupted list in hsr_add_node net	8				1	2508d	2507d	15/29	2406d	92a35678ec07 hsr: fix a race condition in node list insertion and deletion
kernel BUG at include/linux/mm.h:LINE! (5) net	-1	syz, C	done	done	129	2682d	2752d	15/29	2443d	9354544cbccf net/tls: fix page double free on TX cleanup
KASAN: slab-out-of-bounds Read in bpf_prog_create net bpf	17	syz, C	done		447	2474d	2556d	15/29	2443d	0033b34a03ec ppp: fix out-of-bounds access in bpf_prog_create()
memory leak in register_netdevice net	3	syz, C			19	2474d	2480d	15/29	2443d	42c17fa69f98 net: fix a leak in register_netdevice()
KCSAN: data-race in mod_timer / run_timer_softirq net	6				4	2460d	2525d	15/29	2443d	56144737e673 net-backports: hrtimer: Annotate lockless access to timer->state
WARNING: refcount bug in skb_set_owner_w net	13	syz, C	done		2	2480d	2480d	15/29	2443d	501a90c94510 net-backports: inet: protect against too small mtu values.
KMSAN: use-after-free in netlink_recvmsg net	18	syz, C			1	2499d	2499d	15/29	2469d	cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
KMSAN: use-after-free in __skb_try_recv_from_queue net	18	syz, C			4	2498d	2522d	15/29	2469d	cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in ip_sublist_rcv net	2	syz, C	done		287	2512d	2522d	15/29	2469d	51210ad5a558 inet: do not call sublist_rcv on empty list
kernel BUG at include/linux/scatterlist.h:LINE! net	-1	syz, C	done		307	2480d	2674d	15/29	2469d	d10523d0b3d7 net/tls: free the record on encryption error
KCSAN: data-race in __ip4_datagram_connect / raw_bind net	6				1	2517d	2517d	15/29	2469d	25c7a6d1f90e net: avoid potential false sharing in neighbor related code
KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit net	6				40	2470d	2519d	15/29	2469d	90b2be27bb0e net/sched: annotate lockless accesses to qdisc->empty
general protection fault in ip6_sublist_rcv net	2	syz, C	done		327	2512d	2514d	15/29	2469d	51210ad5a558 inet: do not call sublist_rcv on empty list
KCSAN: data-race in inet_putpeer / inet_putpeer net	6				20	2502d	2519d	15/29	2469d	71685eb4ce80 inetpeer: fix data-race in inet_putpeer / inet_putpeer
KCSAN: data-race in eth_header_cache / neigh_resolve_output net	6				1	2507d	2507d	15/29	2469d	c305c6ae79e2 net-backports: net: add annotations on hh->hh_len lockless accesses
KMSAN: use-after-free in sk_forced_mem_schedule net	18				2	2492d	2500d	15/29	2469d	cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in devlink_get_from_attrs net	2	syz, C			7	2536d	2536d	15/29	2469d	82a843de41d4 net: devlink: fix reporter dump dumpit
general protection fault in vti6_ioctl net	2				1	2528d	2527d	15/29	2469d	9077f052abd5 net: propagate errors correctly in register_netdevice()
KCSAN: data-race in tun_get_user / tun_net_get_stats64 net	6				1	2514d	2514d	15/29	2469d	de7d5084d827 net-backports: net: provide dev_lstats_read() helper
KCSAN: data-race in sk_wait_data / tcp_queue_rcv net	6				4	2509d	2506d	15/29	2469d	f8cc62ca3e66 net: add a READ_ONCE() in skb_peek_tail()
KCSAN: data-race in tcp_add_backlog / tcp_recvmsg (2) net	6				47	2470d	2506d	15/29	2469d	9ed498c6280a net-backports: net: silence data-races on sk_backlog.tail
KCSAN: data-race in sk_wait_data / skb_queue_tail net	6				3	2517d	2518d	15/29	2469d	f8cc62ca3e66 net-backports: net: add a READ_ONCE() in skb_peek_tail()
general protection fault in veth_get_stats64 net	2	syz, C	done		2	2541d	2541d	15/29	2469d	9077f052abd5 net: propagate errors correctly in register_netdevice()
KCSAN: data-race in icmp_global_allow / icmp_global_allow net	6				29	2469d	2520d	15/29	2469d	bbab7ef23503 net-backports: net: icmp: fix data-race in cmp_global_allow()
KCSAN: data-race in __dev_queue_xmit / pfifo_fast_dequeue net	6				6	2483d	2520d	15/29	2469d	90b2be27bb0e net/sched: annotate lockless accesses to qdisc->empty
KCSAN: data-race in tcp_chrono_stop / tcp_recvmsg net	6				3	2504d	2506d	15/29	2469d	a5a7daa52edb net-backports: tcp: fix data-race in tcp_recvmsg()
KCSAN: data-race in gro_normal_list.part.0 / napi_busy_loop net	6				1	2503d	2503d	15/29	2469d	c39e342a050a net-backports: tun: fix data-race in gro_normal_list()
KASAN: use-after-free Read in slip_open net	19	syz, C	done		3	2488d	2489d	15/29	2469d	e58c19124189 slip: Fix use-after-free Read in slip_open
KCSAN: data-race in fanout_demux_rollover / fanout_demux_rollover net	6				1	2504d	2504d	15/29	2469d	b756ad928d98 net-backports: packet: fix data-race in fanout_flow_is_huge()
WARNING in __rtnl_newlink net	-1	syz, C	done		2	2539d	2539d	15/29	2469d	9077f052abd5 net: propagate errors correctly in register_netdevice()
WARNING: ODEBUG bug in free_netdev net	-1	syz, C	done		2	2538d	2538d	15/29	2469d	11fc7d5a0a2d tun: fix memory leak in error path
general protection fault in ip6_tnl_ioctl net	2	syz, C	done		7	2529d	2540d	15/29	2469d	9077f052abd5 net: propagate errors correctly in register_netdevice()
KCSAN: data-race in __dev_queue_xmit / net_tx_action net	6				1	2504d	2504d	15/29	2469d	90b2be27bb0e net/sched: annotate lockless accesses to qdisc->empty
KMSAN: use-after-free in copyout net	18	syz, C			1	2534d	2534d	15/29	2469d	cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in virtio_transport_release kvm net virt	2	syz, C	done		7	2492d	2493d	15/29	2469d	039fcccaed33 vsock: avoid to assign transport if its initialization fails
KCSAN: data-race in neigh_resolve_output / neigh_resolve_output net	6				4	2504d	2518d	14/29	2483d	1b53d64435d5 net-backports: net: fix data-race in neigh_event_send()
KCSAN: data-race in find_match / find_match net	6				2	2505d	2509d	14/29	2483d	1bef4c223b85 net-backports: ipv6: fixes rt6_probe() and fib6_nh->last_probe init
BUG: spinlock recursion in release_sock net	4	syz, C	done		116	2610d	2611d	13/29	2485d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
KMSAN: use-after-free in rxrpc_put_peer afs net	18				1	2526d	2526d	13/29	2485d	91fcfbe8852e rxrpc: Fix call crypto state cleanup
WARNING in sk_stream_kill_queues (3) net	-1	syz, C	done		622	2657d	3016d	13/29	2486d	9354544cbccf net/tls: fix page double free on TX cleanup
KCSAN: data-race in udp_set_dev_scratch / udpv6_recvmsg net	6				5	2508d	2519d	13/29	2489d	a793183caa9a udp: fix data-race in udp_set_dev_scratch()
KCSAN: data-race in __skb_wait_for_more_packets / skb_queue_tail net	6				1	2512d	2512d	13/29	2489d	7c422d0ce975 net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
INFO: trying to register non-static key in bond_3ad_update_lacp_rate net	-1	syz, C	done		26	2512d	2514d	13/29	2489d	ad9bd8daf2f9 bonding: fix using uninitialized mode_lock
KCSAN: data-race in datagram_poll / skb_queue_tail net	6				5	2508d	2518d	13/29	2489d	3ef7cf57c72f net-backports: net: use skb_queue_empty_lockless() in poll() handlers
general protection fault in process_one_work net	2				2	2514d	2514d	13/29	2489d	6d6f0383b697 netdevsim: Fix use-after-free during device dismantle
KCSAN: data-race in udp6_lib_lookup2 / udpv6_queue_rcv_one_skb net	6				1	2519d	2519d	13/29	2489d	7170a977743b net: annotate accesses to sk->sk_incoming_cpu
KCSAN: data-race in tcp_v4_rcv / tcp_v4_rcv net	6				4	2509d	2513d	13/29	2489d	7170a977743b net-backports: net: annotate accesses to sk->sk_incoming_cpu
KCSAN: data-race in __skb_recv_udp / __udp_enqueue_schedule_skb net	6				7	2508d	2520d	13/29	2489d	137a0dbe3426 net-backports: udp: use skb_queue_empty_lockless()
KCSAN: data-race in first_packet_length / udp_poll net	6				2	2511d	2518d	13/29	2489d	137a0dbe3426 net-backports: udp: use skb_queue_empty_lockless()
INFO: trying to register non-static key in bond_3ad_update_ad_actor_settings net	-1	syz, C	done		69	2512d	2515d	13/29	2489d	ad9bd8daf2f9 bonding: fix using uninitialized mode_lock
KCSAN: data-race in __skb_wait_for_more_packets / __sock_queue_rcv_skb net	6				10	2508d	2519d	13/29	2489d	7c422d0ce975 net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
KCSAN: data-race in udpv6_queue_rcv_one_skb / udpv6_queue_rcv_one_skb net	6				1	2516d	2515d	13/29	2489d	ee8d153d46a3 net-backports: net: annotate lockless accesses to sk->sk_napi_id
KCSAN: data-race in __skb_recv_udp / datagram_poll net	6				1	2509d	2509d	13/29	2489d	3f926af3f4d6 net: use skb_queue_empty_lockless() in busy poll contexts
KCSAN: data-race in __skb_wait_for_more_packets / __udp_enqueue_schedule_skb net	6				2	2512d	2519d	13/29	2489d	7c422d0ce975 net-backports: net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
BUG: MAX_LOCK_DEPTH too low! (2) net	-1	syz, C		done	5	2987d	3018d	13/29	2501d	bab2c80e5a6c nsh: set mac len based on inner packet
inconsistent lock state in ila_xlat_nl_cmd_del_mapping net	4	syz, C		unreliable	2496	2949d	2955d	13/29	2501d	7494de0454af mfd: da9063: Replace regmap_add_irq_chip with devm counterpart
KASAN: stack-out-of-bounds Read in xfrm_state_find (5) net	17	syz, C		done	654	2787d	3089d	13/29	2501d	32bf94fb5c2e xfrm: validate template mode
KASAN: use-after-free Read in _decode_session4 net	19	syz, C		done	3	3092d	3092d	13/29	2501d	c6741fbed6dc vti6: Properly adjust vti6 MTU from MTU of lower device
general protection fault in tcp_cleanup_ulp net	2	syz	done	done	6	2917d	2932d	13/29	2501d	5607fff30363 bpf: sockmap only allow ESTABLISHED sock state
general protection fault in tcp_splice_read net	2	syz, C	done	done	23	2717d	2827d	13/29	2502d	07603b230895 net/smc: propagate file from SMC to TCP socket
kernel BUG at net/ipv4/ip_output.c:LINE! net	-1	syz, C		done	28225	2796d	2987d	13/29	2504d	e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
suspicious RCU usage at ./include/net/inet_sock.h:LINE net	-1	syz, C		done	171	3147d	3237d	13/29	2504d	3f32d0be6c16 tipc: lock wakeup & inputq at tipc_link_reset()
KASAN: use-after-free Read in _decode_session6 net	19	syz, C		done	4	2864d	2932d	13/29	2505d	e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
KCSAN: data-race in sk_stream_wait_memory / tcp_shifted_skb net	6				1	2518d	2506d	13/29	2505d	ab4e846a82d0 tcp: annotate sk->sk_wmem_queued lockless reads
KCSAN: data-race in sk_stream_wait_memory / tcp_fragment net	6				1	2509d	2506d	13/29	2505d	ab4e846a82d0 tcp: annotate sk->sk_wmem_queued lockless reads
KCSAN: data-race in tcp_sendmsg_locked / tcp_stream_memory_free net	6				2	2517d	2506d	13/29	2505d	0f31746452e6 tcp: annotate tp->write_seq lockless reads
KCSAN: data-race in tcp_event_new_data_sent / tcp_stream_memory_free net	6				3	2509d	2506d	13/29	2505d	e0d694d638db tcp: annotate tp->snd_nxt lockless reads
KCSAN: data-race in tcp_ack / tcp_poll (2) net	6				5	2513d	2506d	13/29	2505d	ab4e846a82d0 tcp: annotate sk->sk_wmem_queued lockless reads
KCSAN: data-race in sk_stream_wait_memory / tcp_ack net	6				2	2510d	2506d	13/29	2505d	ab4e846a82d0 tcp: annotate sk->sk_wmem_queued lockless reads
KCSAN: data-race in tcp_add_backlog / tcp_rcv_space_adjust (2) net	6				18	2520d	2527d	13/29	2508d	ebb3b78db7bf tcp: annotate sk->sk_rcvbuf lockless reads
BUG: unable to handle kernel NULL pointer dereference in xsk_poll bpf net	10	syz, C	done		10	2525d	2543d	13/29	2508d	df551058f7a3 xsk: Fix crash in poll when device does not support ndo_xsk_wakeup
KASAN: use-after-free Read in rxrpc_release_call afs net	19	syz	done		13	2525d	2581d	13/29	2508d	91fcfbe8852e rxrpc: Fix call crypto state cleanup
KASAN: use-after-free Read in rxrpc_send_keepalive afs net	19	syz, C	error		694	2522d	2595d	13/29	2508d	c48fc11b69e9 rxrpc: Fix call ref leak
KCSAN: data-race in __tcp_select_window / tcp_add_backlog net	6				23502	2508d	2539d	13/29	2508d	70c2655849a2 net: silence KCSAN warnings about sk->sk_backlog.len reads
memory leak in llc_ui_sendmsg net	3	syz, C			125	2523d	2675d	13/29	2508d	c6ee11c39fcc llc: fix sk_buff leak in llc_sap_state_process()
KCSAN: data-race in tcp_add_backlog / tcp_recvmsg net	6				17719	2508d	2539d	13/29	2508d	8265792bf887 net-backports: net: silence KCSAN warnings around sk_add_backlog() calls
INFO: task hung in addrconf_verify_work (2) net	1	syz, C			22	2529d	2529d	13/29	2508d	39f13ea2f61b net: avoid potential infinite loop in tc_ctl_action()
KCSAN: data-race in tcp_poll / tcp_recvmsg (2) net	6				22	2521d	2527d	13/29	2508d	7db48e983930 tcp: annotate tp->copied_seq lockless reads
KASAN: use-after-free Read in rxrpc_put_peer afs net	19	syz, C	error		38	2523d	2576d	13/29	2508d	55f6c98e3674 rxrpc: Fix trace-after-put looking at the put peer record 9ebeddef58c4 rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
KCSAN: data-race in tcp_poll / tcp_queue_rcv net	6				1897	2508d	2539d	13/29	2508d	dba7d9b8c739 net-backports: tcp: annotate tp->rcv_nxt lockless reads
memory leak in llc_conn_ac_send_sabme_cmd_p_set_x net	3	syz, C			225	2523d	2675d	13/29	2508d	b74555de21ac llc: fix sk_buff leak in llc_conn_service()
general protection fault in rxrpc_error_report net afs	2	syz, C	done		6	2523d	2536d	13/29	2508d	f0308fb07080 rxrpc: Fix possible NULL pointer access in ICMP handling
KCSAN: data-race in tcp_add_backlog / tcp_grow_window.isra.0 net	6				21713	2508d	2539d	13/29	2508d	70c2655849a2 net-backports: net: silence KCSAN warnings about sk->sk_backlog.len reads
WARNING: suspicious RCU usage in xfrm_alloc_userspi net	4	syz, C	done	error	86	2736d	2738d	13/29	2508d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
general protection fault in get_work_pool net	2	syz, C		done	24	2716d	3119d	13/29	2508d	07bf7908950a xfrm: Validate address prefix lengths in the xfrm selector.
general protection fault in xfrm_init_replay net	2	syz	inconclusive	done	2	3106d	3105d	13/29	2508d	d97ca5d714a5 xfrm_user: uncoditionally validate esn replay attribute struct
WARNING: suspicious RCU usage in xfrm_get_spdinfo net	4	syz, C	done	error	46	2736d	2738d	13/29	2508d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
WARNING: suspicious RCU usage in xfrm_get_sadinfo net	4	syz, C	done	error	28	2737d	2738d	13/29	2508d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
WARNING: suspicious RCU usage in xfrm_get_policy net	4	syz	done	error	8	2737d	2738d	13/29	2508d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
INFO: rcu detected stall in rt6_probe_deferred net	1				336	2557d	2563d	13/29	2522d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in addrconf_rs_timer (2) net	1				362	2540d	2563d	13/29	2522d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
divide error in tabledist net	2				3	2545d	2554d	13/29	2527d	b41d936b5ecf sch_netem: fix a divide by zero in tabledist()
BUG: using smp_processor_id() in preemptible [ADDR] code: mime_typevmnet0/NUM net	4				1	2572d	2570d	13/29	2527d	00d9e47f8ec2 posix-cpu-timers: Always clear head pointer on dequeue
KMSAN: uninit-value in inet_ehash_insert net	7	syz, C			7	2536d	2543d	13/29	2527d	6af1799aaf3f net-backports: ipv6: drop incoming packets having a v4mapped source address
general protection fault in xsk_poll net bpf	2	syz, C	done		430	2557d	2584d	13/29	2527d	42fddcc7c64b xsk: use state member for socket synchronization
BUG: sleeping function called from invalid context in tcf_chain0_head_change_cb_del net	5	syz, C	done		187	2543d	2556d	13/29	2527d	e3ae1f96accd net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
BUG: corrupted list in __netif_receive_skb_list_core net	8				3	2535d	2589d	13/29	2527d	c7a42eb49212 net: ipv6: fix listify ip6_rcv_finish in case of forwarding
KASAN: slab-out-of-bounds Read in do_tcp_getsockopt net	17				3	2551d	2570d	13/29	2527d	3afb09618840 tcp: fix slab-out-of-bounds in tcp_zerocopy_receive()
INFO: rcu detected stall in pie_timer net	1	syz, C			19	2528d	2563d	13/29	2527d	4ce70b4aed57 net-backports: net: sched: sch_htb: don't call qdisc_put() while holding tree lock
KASAN: use-after-free Read in cbq_enqueue net	19	syz, C	done		4	2536d	2537d	13/29	2527d	e9789c7cc182 sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
general protection fault in dsmark_init net	2	syz, C	done		3	2536d	2539d	13/29	2527d	474f0813a300 sch_dsmark: fix potential NULL deref in dsmark_init()
possible deadlock in pie_timer net	4	syz, C	done		2	2544d	2545d	13/29	2527d	e3ae1f96accd net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
general protection fault in tcf_action_destroy net	2				128	2544d	2562d	13/29	2527d	3d66b89c30f9 net: sched: fix possible crash in tcf_action_destroy()
general protection fault in dev_map_hash_update_elem net bpf	2	syz, C	done		4	2561d	2567d	13/29	2527d	af58e7ee6a8d xdp: Fix race in dev_map_hash_update_elem() when replacing element
INFO: rcu detected stall in sys_sendmmsg net	1				2	2563d	2563d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in pppoe_sendmsg net	1				7	2558d	2565d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
WARNING in xfrm_policy_inexact_list_reinsert net	-1				2	2568d	2596d	13/29	2534d	769a807d0b41 xfrm: policy: avoid warning splat when merging nodes
INFO: rcu detected stall in sys_sendmsg net	1	syz, C	done		2	2559d	2559d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in br_hello_timer_expired net	1				4	2557d	2563d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in inet_release net	1				1	2567d	2566d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in packet_sendmsg net	1				10	2559d	2564d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
general protection fault in addrconf_f6i_alloc net	2	syz, C			305	2557d	2568d	13/29	2534d	8652f17c658d ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
INFO: rcu detected stall in dccp_write_timer net	1				5	2563d	2566d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
general protection fault in tls_sk_proto_close (2) net	2	syz	error		246	2557d	2576d	13/29	2534d	44580a0118d3 net: sock_map, fix missing ulp check in sock hash case
INFO: rcu detected stall in neigh_timer_handler (2) net	1				2	2563d	2564d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
BUG: soft lockup in addrconf_dad_work net	1	syz, C	done		1	2562d	2562d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in igmp_ifc_timer_expire net	1	syz, C			57	2557d	2816d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in mld_dad_timer_expire net	1				3	2562d	2563d	13/29	2534d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass net	10	syz, C	done		61	2557d	2565d	13/29	2534d	8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
KMSAN: uninit-value in capi_write net	7	syz, C			445	2534d	2773d	13/29	2534d	fe163e534e5e isdn/capi: check message length in capi_write()
general protection fault in icmpv6_xrlim_allow net	2				4	2661d	2668d	13/29	2535d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
general protection fault in ip6_rcv_finish net	2				3	2652d	2658d	13/29	2535d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
general protection fault in requeue_rx_msgs net	2	syz	done	inconclusive	1	3031d	3030d	13/29	2539d	eb7f54b90bd8 kcm: Fix use-after-free caused by clonned sockets
KASAN: user-memory-access Read in ip6_hold_safe (3) net	17				456	2645d	2664d	13/29	2539d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
WARNING in cbs_dequeue_soft net	-1	syz, C	done		13	2558d	2565d	12/29	2557d	1c6c09a0ae62 net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
general protection fault in packet_lookup_frame net	2	syz, C	done		7	2590d	2590d	12/29	2566d	32d3182cd2cd net/packet: fix race in tpacket_snd()
memory leak in ip6_mc_add_src net	3	syz, C			1	2577d	2577d	12/29	2566d	a84d01647989 mld: fix memory leak in mld_del_delrec()
KASAN: use-after-free Read in rxrpc_queue_local afs net	19	syz, C	done		1	2592d	2592d	12/29	2566d	06d9532fa6b3 rxrpc: Fix read-after-free in rxrpc_queue_local()
general protection fault in tls_write_space net	2	syz			33	2585d	2595d	12/29	2566d	57c722e932cf net/tls: swap sk_write_space on close
KMSAN: uninit-value in rtm_new_nexthop net	7	syz, C			8	2583d	2582d	12/29	2566d	d00ee64e1dcf netlink: Fix nlmsg_parse as a wrapper for strict message parsing
kernel BUG at net/rxrpc/local_object.c:LINE! net afs	-1	syz, C	done		11167	2570d	2637d	12/29	2566d	730c5fd42c1e rxrpc: Fix local endpoint refcounting
KMSAN: uninit-value in rtm_dump_nexthop net	7	syz, C			6	2577d	2593d	12/29	2566d	d00ee64e1dcf netlink: Fix nlmsg_parse as a wrapper for strict message parsing
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind net usb	17	syz, C			2	2590d	2592d	12/29	2566d	54364278fb3c USB: CDC: fix sanity checks in CDC union parser
BUG: corrupted list in rxrpc_local_processor net afs	8	syz, C	done		1679	2587d	2595d	12/29	2566d	b00df840fb40 rxrpc: Fix local endpoint replacement
KASAN: use-after-free Write in __xfrm_policy_unlink (2) net	22				7	2634d	2680d	12/29	2571d	b805d78d300b xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
WARNING: ODEBUG bug in tls_sw_free_resources_tx net	-1				23	2612d	2870d	12/29	2577d	f87e62d45e51 net/tls: remove close callback sock unlock/lock around TX work flush
general protection fault in tls_trim_both_msgs net	2	syz, C	done		36	2599d	2610d	12/29	2577d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
KASAN: invalid-free in tls_sk_proto_cleanup net	24				5	2601d	2604d	12/29	2577d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
BUG: unable to handle kernel paging request in tls_prots net bpf	8	syz	done		1	2639d	2639d	12/29	2577d	95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: use-after-free Read in tls_wait_data net	19				1	2602d	2596d	12/29	2577d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
general protection fault in tls_tx_records net	2				1	2604d	2596d	12/29	2577d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
memory leak in create_ctx net	3	syz			1	2657d	2657d	12/29	2577d	95fa145479fb bpf: sockmap/tls, close can race with map free
KASAN: use-after-free Read in tls_sk_proto_cleanup net	19				9	2599d	2610d	12/29	2577d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
general protection fault in tls_setsockopt net	2	syz	done		7	2605d	2618d	12/29	2577d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
KASAN: use-after-free Read in tls_push_sg net	19				2	2605d	2679d	12/29	2584d	9354544cbccf net/tls: fix page double free on TX cleanup
possible deadlock in xsk_notifier net bpf	4	syz, C	done		495	2615d	2627d	12/29	2590d	5464c3a0e9a0 xdp: fix potential deadlock on socket mutex
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb net	17	syz, C			634	2606d	2711d	12/29	2590d	f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
general protection fault in send_hsr_supervision_frame net	2	syz, C	done		1395	2619d	2627d	12/29	2599d	311633b60406 hsr: switch ->dellink() to ->ndo_uninit()
memory leak in ip_mc_add_src (2) net	3	syz, C			7	2609d	2638d	12/29	2599d	e5b1c6c6277d igmp: fix memory leak in igmpv3_del_delrec()
general protection fault in ip6_datagram_dst_update net	2	syz, C	done		12	2622d	2625d	12/29	2599d	8975a3abc303 ipv6: fix potential crash in ip6_datagram_dst_update()
KASAN: use-after-free Read in ip_expire net	19				1	2647d	2647d	12/29	2599d	d5dd88794a13 inet: fix various use-after-free in defrags units
KMSAN: uninit-value in bond_start_xmit (2) net	7	syz, C			2309	2599d	2923d	12/29	2599d	9d1bc24b52fb bonding: validate ip header before check IPPROTO_IGMP
memory leak in pfkey_xfrm_policy2msg_prep net	3	syz, C			4	2639d	2671d	12/29	2599d	7c80eb1c7e2b af_key: fix leaks in key_pol_get_resp and dump_sp.
KASAN: use-after-free Read in kfree_skb_list net	19	syz, C	done		383	2645d	2664d	12/29	2599d	b7034146756b net: fix use-after-free in kfree_skb_list
memory leak in __ip6_append_data net	3	syz, C			10	2642d	2668d	12/29	2599d	dc93f46bc4e0 inet: frags: fix use-after-free read in inet_frag_destroy_rcu
KASAN: use-after-free Write in xfrm_hash_rebuild net	22	syz	done		8	2632d	2680d	12/29	2599d	fd709721352d xfrm: policy: fix bydst hlist corruption on hash rebuild
WARNING: suspicious RCU usage in in_dev_dump_addr net	4	syz, C	done		107	2660d	2662d	12/29	2599d	d3e6e285fff3 net: ipv4: fix rcu lockdep splat due to wrong annotation
general protection fault in tcp_v6_send_reset net	2	syz, C	done		353	2654d	2658d	12/29	2599d	392096736a06 ipv6: tcp: fix potential NULL deref in tcp_v6_send_reset()
KASAN: use-after-free Read in inet_frag_destroy_rcu net	19	syz, C	done		61	2666d	2669d	12/29	2599d	dc93f46bc4e0 inet: frags: fix use-after-free read in inet_frag_destroy_rcu
KASAN: use-after-free Read in rhashtable_last_table (2) net	19				1	2673d	2673d	12/29	2599d	dc93f46bc4e0 inet: frags: fix use-after-free read in inet_frag_destroy_rcu
general protection fault in rxrpc_connect_call afs net	2	syz, C	done		15	2647d	2793d	12/29	2599d	e835ada07091 rxrpc: Fix send on a connected, but unbound socket
WARNING: suspicious RCU usage in fib_dump_info_fnhe net	4	syz, C	done		7	2639d	2639d	12/29	2599d	3b525691529b ipv6: fix suspicious RCU usage in rt6_dump_route()
memory leak in hsr_create_self_node net	3	syz, C			5	2638d	2669d	12/29	2599d	b9a1e627405d hsr: implement dellink to clean up resources
general protection fault in call_fib6_multipath_entry_notifiers net	2	syz, C	done		94	2640d	2646d	12/29	2599d	9eee3b4913d7 ipv6: Error when route does not have any valid nexthops
memory leak in packet_set_ring net	3	syz, C			2	2638d	2642d	12/29	2606d	55655e3d1197 net/packet: fix memory leak in packet_set_ring()
general protection fault in inet_accept net	2	syz, C			131	2827d	2989d	12/29	2624d	07603b230895 net/smc: propagate file from SMC to TCP socket
BUG: unable to handle kernel paging request in ipv6_rcv (2) net	8				18	2646d	2670d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
KMSAN: uninit-value in tcp_create_openreq_child net	7	syz, C			4000	2625d	2646d	12/29	2624d	85f9aa7565bd inet: clear num_timeout reqsk_alloc()
KASAN: slab-out-of-bounds Read in dst_dev_put net	17				3	2758d	2809d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
KASAN: use-after-free Read in pneigh_get_next net	19	syz	done		2	2650d	2650d	12/29	2624d	f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
KASAN: slab-out-of-bounds Read in __fib6_drop_pcpu_from net	17				1	2649d	2649d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
memory leak in inet6_create net	3	syz, C			2	2656d	2659d	12/29	2624d	522924b58308 net: correct udp zerocopy refcnt also when zerocopy only on append
general protection fault in rt_cache_valid net	2				24	2642d	2769d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
KASAN: use-after-free Read in sprintf net	19	syz	done		2	2650d	2650d	12/29	2624d	f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
general protection fault in dst_dev_put (2) net	2	syz, C	done		442	2646d	2836d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
KASAN: slab-out-of-bounds Read in rt_cache_valid net	17				3	2663d	2661d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
BUG: unable to handle kernel paging request in dst_dev_put net	8				3	2666d	2809d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
KASAN: use-after-free Read in rt_cache_valid net	19	syz	done		5	2657d	2773d	12/29	2624d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
memory leak in packet_setsockopt net	3	syz, C			10	2658d	2675d	12/29	2645d	afa0925c6fcc packet: unconditionally free po->rollover
KASAN: wild-memory-access Read in refcount_sub_and_test_checked net	17				2	2665d	2682d	12/29	2647d	61fb0d016807 ipv6: prevent possible fib6 leaks
KASAN: use-after-free Read in ip6_fragment net	19				1	2678d	2677d	12/29	2647d	61fb0d016807 ipv6: prevent possible fib6 leaks
BUG: unable to handle kernel NULL pointer dereference in ip6_rcv_finish net	10				3	2653d	2682d	12/29	2647d	61fb0d016807 ipv6: prevent possible fib6 leaks
KASAN: use-after-free Write in fib6_purge_rt net	22				2	2672d	2679d	12/29	2647d	61fb0d016807 ipv6: prevent possible fib6 leaks
KASAN: null-ptr-deref Write in fib6_purge_rt net	12				18	2660d	2683d	12/29	2647d	61fb0d016807 ipv6: prevent possible fib6 leaks
memory leak in ip_mc_add_src net	3	syz, C			14	2651d	2675d	12/29	2647d	3580d04aa674 ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
memory leak in llc_ui_create net	3	syz, C			4	2656d	2669d	12/29	2647d	8fb44d60d414 llc: fix skb leak in llc_build_and_send_ui_pkt()
memory leak in inet_create net	3	syz, C			2	2660d	2675d	12/29	2647d	100f6d8e0990 net: correct zerocopy refcnt with udp MSG_MORE
KASAN: slab-out-of-bounds Write in fib6_purge_rt net	21				6	2647d	2683d	12/29	2647d	61fb0d016807 ipv6: prevent possible fib6 leaks
KASAN: use-after-free Read in __dev_map_entry_free bpf net	19	syz, C			473	2729d	3010d	12/29	2647d	2baae3545327 bpf: devmap: fix use-after-free Read in __dev_map_entry_free
BUG: assuming atomic context at net/core/flow_dissector.c:LINE net	-1	syz			19	2681d	2685d	12/29	2651d	b1c17a9a3538 flow_dissector: disable preemption around BPF calls
KASAN: use-after-free Read in tcp_v6_send_reset net	19				1	2731d	2731d	12/29	2651d	4f661542a402 tcp: fix zerocopy and notsent_lowat issues
KASAN: slab-out-of-bounds Write in skb_release_data net	21				1	2730d	2730d	12/29	2651d	4f661542a402 tcp: fix zerocopy and notsent_lowat issues
general protection fault in __handle_mm_fault net	2	syz, C	error		17	2893d	2902d	12/29	2654d	ff09d7ec9786 mm/memory.c: recheck page table entry with page table lock held
WARNING in xfrm_state_fini (2) net	-1	syz, C			37510	2693d	3146d	12/29	2669d	dbb2483b2a46 xfrm: clean up xfrm protocol checks
KMSAN: uninit-value in rtnl_stats_dump net	7	syz			14	2699d	2714d	12/29	2669d	69f23a09daf9 rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
WARNING: suspicious RCU usage in fib_compute_spec_dst net	4				1	2713d	2713d	12/29	2669d	c543cb4a5f07 ipv4: ensure rcu_read_lock() in ipv4_link_failure()
KASAN: slab-out-of-bounds Read in skb_gro_receive (2) net	17	syz, C	done		5	2694d	2694d	12/29	2669d	4dd2b82d5adf udp: fix GRO packet of death
KASAN: stack-out-of-bounds Write in __ip_options_echo net	21	syz	done		8	2703d	2706d	12/29	2669d	20ff83f10f11 ipv4: add sanity checks in ipv4_link_failure()
KMSAN: uninit-value in rtnl_stats_get net	7	syz, C			5	2706d	2714d	12/29	2669d	69f23a09daf9 rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
kernel BUG at net/core/net-sysfs.c:LINE! net	-1	syz, C	done		890	2698d	2734d	12/29	2669d	8ed633b9baf9 Revert "net-sysfs: Fix memory leak in netdev_register_kobject"
WARNING: refcount bug in l2tp_tunnel_get net	13				1	2696d	2696d	12/29	2669d	a622b40035d1 l2ip: fix possible use-after-free
KASAN: user-memory-access Write in fib6_purge_rt net	21				6	2670d	2700d	12/29	2669d	0e2338749192 ipv6: fix races in ip6_dst_destroy()
INFO: task hung in vhost_net_stop_vq net virt kvm	1	syz, C	done		136	2709d	2846d	12/29	2669d	813dbeb656d6 vhost: reject zero size iova range
WARNING: locking bug in icmp_send net	4	syz	done		1	2766d	2765d	12/29	2686d	9926cb5f8b0f tipc: change to check tipc_own_id to return in tipc_net_stop
KMSAN: uninit-value in ip6_compressed_string nfs net	7	syz, C			9024	2697d	2849d	12/29	2696d	7c2bd9a39845 NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
BUG: corrupted list in rhashtable_walk_enter net	8	syz	error		3	2733d	2732d	12/29	2714d	b5f9bd15b885 ila: Fix rhashtable walker list corruption
BUG: unable to handle kernel paging request in ip6_fragment net	8				1	2729d	2728d	12/29	2714d	ef0efcd3bd3f ipv6: Fix dangling pointer when ipv6 fragment
WARNING: lock held when returning to user space in tun_get_user net	4	syz, C	done		55	2740d	2741d	12/29	2716d	9180bb4f0460 tun: add a missing rcu_read_unlock() in error path
general protection fault in fib6_purge_rt net	2	syz, C	done		60	2717d	2835d	12/29	2716d	9926cb5f8b0f tipc: change to check tipc_own_id to return in tipc_net_stop
KASAN: slab-out-of-bounds Read in icmp6_send net	17				1	2743d	2743d	12/29	2716d	4477138fa0ae tun: properly test for IFF_UP
KASAN: use-after-free Read in __icmp_send net	19				1	2734d	2730d	12/29	2716d	4477138fa0ae tun: properly test for IFF_UP
general protection fault in tc_ctl_chain net	2	syz, C			21	2763d	2772d	11/29	2729d	af736bf071e8 net: sched: potential NULL dereference in tcf_block_find()
KASAN: use-after-free Read in unix_dgram_poll net	19	syz			2	2758d	2754d	11/29	2729d	84c4e1f89fef aio: simplify - and fix - fget/fput for io_submit()
KMSAN: uninit-value in gue6_err (2) net	7	syz, C			2826	2729d	2751d	11/29	2729d	5355ed6388e2 fou, fou6: avoid uninit-value in gue_err() and gue6_err()
kernel BUG at kernel/time/timer.c:LINE! (3) net	-1				1	2750d	2750d	11/29	2729d	1e027960edfa net/hsr: fix possible crash in add_timer()
BUG: unable to handle kernel paging request in gro_cells_destroy (3) net	8				3	2731d	2747d	11/29	2729d	2a5ff07a0eb9 gro_cells: make sure device is up in gro_cells_receive()
KMSAN: kernel-infoleak in move_addr_to_user (2) net	9	syz, C			8	2730d	2745d	11/29	2729d	163d1c3d6f17 l2tp: fix infoleak in l2tp_ip6_recvmsg()
general protection fault in xsk_diag_dump net bpf	2	syz, C			5	2747d	2752d	11/29	2729d	915905f8b1d4 xsk: fix potential crash in xsk_diag_put_umem()
KMSAN: uninit-value in gue_err (2) net	7	syz, C			1617	2729d	2751d	11/29	2729d	5355ed6388e2 fou, fou6: avoid uninit-value in gue_err() and gue6_err()
KASAN: slab-out-of-bounds Read in xfrm_policy_insert_list net	17				1	2803d	2802d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KASAN: use-after-free Write in __xfrm_policy_unlink net	22	syz, C			254	2754d	2982d	11/29	2751d	1548bc4e0512 xfrm: policy: delete inexact policies from inexact list on hash rebuild
KASAN: use-after-free Read in xfrm_migrate net	19				5	2786d	2809d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in xfrm_policy_insert_list net	-1				2	2801d	2812d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KASAN: slab-out-of-bounds Read in xfrm_policy_lookup_bytype net	17				6	2805d	2827d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KASAN: use-after-free Read in xfrm_policy_insert_list net	19				30	2786d	2828d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in __skb_flow_dissect (3) net	-1	syz			224	2801d	2890d	11/29	2751d	0b7959b62573 tun: publish tfile after it's fully initialized
INFO: rcu detected stall in pfkey_sendmsg net	1				7	2803d	2828d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KMSAN: kernel-infoleak in move_addr_to_user net	9				5	2758d	2808d	11/29	2751d	7d033c9f6a7f ipv6: fix kernel-infoleak in ipv6_local_error()
BUG: unable to handle kernel paging request in depot_save_stack net	8	syz, C			1	2811d	2811d	11/29	2751d	44039e00171b fou6: Prevent unbounded recursion in GUE error handler
general protection fault in dccp_parse_options net	2				1	2786d	2786d	11/29	2751d	9b1f19d810e9 dccp: fool proof ccid_hc_[rt]x_parse_options()
KASAN: slab-out-of-bounds Read in __xfrm_policy_bysel_ctx net	17				1	2813d	2813d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in tcp_send_loss_probe net	-1	syz, C			9	2761d	2813d	11/29	2751d	bf50b606cfd8 tcp: repaired skbs must init their tso_segs
KASAN: stack-out-of-bounds Read in pick_next_task_fair net	17	syz, C			1	2811d	2811d	11/29	2751d	44039e00171b fou6: Prevent unbounded recursion in GUE error handler
general protection fault in icmp6_send net	2	syz			2	2812d	2812d	11/29	2751d	8d9336704521 ipv6: make icmp6_send() robust against null skb->dev
general protection fault in __xfrm_policy_bysel_ctx net	2				1	2789d	2787d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KASAN: slab-out-of-bounds Read in xfrm_policy_inexact_insert net	17				3	2803d	2827d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
general protection fault in team_nl_cmd_options_set net	2	syz, C			7	2821d	2778d	11/29	2751d	2fdeee254923 team: avoid complex list operations in team_nl_cmd_options_set()
KASAN: slab-out-of-bounds Write in __xfrm_policy_unlink net	21				34	2786d	2866d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
INFO: rcu detected stall in xfrm_hash_rebuild net	1				77	2786d	2837d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
general protection fault in xfrm_policy_insert_list net	2				4	2808d	2823d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
general protection fault in xfrm_policy_lookup_bytype net	2				5	2787d	2816d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KASAN: slab-out-of-bounds Read in __pskb_copy_fclone net	17				22	2833d	2900d	11/29	2751d	e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
kernel panic: stack is corrupted in udp4_lib_lookup2 net	2				11	2816d	2813d	11/29	2751d	44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: stack-out-of-bounds Read in gue_err_proto_handler net	17	syz, C			1	2809d	2809d	11/29	2751d	44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KASAN: use-after-free Read in __xfrm_policy_bysel_ctx net	19				11	2786d	2823d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KASAN: use-after-free Read in xfrm_policy_inexact_insert net	19				42	2786d	2816d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KASAN: use-after-free Read in __wake_up_common_lock net	19				1	2786d	2785d	11/29	2751d	bdcc5bc25548 mISDN: fix a race in dev_expire_timer()
INFO: rcu detected stall in ipv6_rcv net	1				7	2789d	2826d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
KMSAN: uninit-value in gue_err net	7	syz, C			4686	2751d	2805d	11/29	2751d	26fc181e6cac fou, fou6: do not assume linear skbs
general protection fault in ip6erspan_set_version net	2	syz, C			39	2760d	2765d	11/29	2751d	efcc9bcaf77c net: ip6_gre: fix possible NULL pointer dereference in ip6erspan_set_version
KASAN: use-after-free Read in xfrm_policy_lookup_bytype net	19				33	2787d	2827d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING in xfrm6_tunnel_net_exit (2) net	-1	syz, C			48816	2760d	3042d	11/29	2751d	f75a2804da39 xfrm: destroy xfrm_state synchronously on net exit path
WARNING in xfrm_policy_inexact_gc_tree net	-1				645	2786d	2837d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING: refcount bug in xfrm_policy_bysel_ctx net	13				1	2805d	2805d	11/29	2751d	12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
WARNING: bad unlock balance in rxrpc_recvmsg afs net	4	syz, C			9	2777d	2781d	11/29	2751d	6dce3c20ac42 rxrpc: bad unlock balance in rxrpc_recvmsg
KASAN: use-after-free Write in __wake_up_common_lock net	22				1	2779d	2779d	11/29	2751d	bdcc5bc25548 mISDN: fix a race in dev_expire_timer()
KMSAN: uninit-value in gue6_err net	7	syz, C			8359	2751d	2805d	11/29	2751d	26fc181e6cac fou, fou6: do not assume linear skbs
general protection fault in finish_wait net	2	syz, C			22	2775d	2991d	11/29	2758d	78abe3d0dfad net/smc: fix TCP fallback socket release
KASAN: out-of-bounds Write in tls_push_record net	21	syz, C			10	2892d	2992d	11/29	2758d	d829e9c4112b tls: convert to generic sk_msg interface
KASAN: use-after-free Read in tls_tx_records net	19				1	2910d	2910d	11/29	2758d	d829e9c4112b tls: convert to generic sk_msg interface
general protection fault in tls_push_sg net	2				12	2901d	3010d	11/29	2758d	d829e9c4112b tls: convert to generic sk_msg interface
kernel BUG at include/linux/mm.h:LINE! (2) net	-1	syz, C			1009	2758d	3022d	11/29	2758d	d829e9c4112b tls: convert to generic sk_msg interface
KASAN: use-after-free Write in tls_push_record (2) net	22	syz, C			64	2886d	2988d	11/29	2758d	d829e9c4112b tls: convert to generic sk_msg interface
WARNING in __debug_object_init (3) bpf net	-1	syz, C			1557	2879d	2880d	11/29	2795d	2cb494a36c98 bpf: add tests for direct packet access from CGROUP_SKB
general protection fault in encode_rpcb_string net nfs	2	syz, C			6	2978d	3074d	11/29	2800d	81c88b18de1f sunrpc: handle ENOMEM in rpcb_getport_async
KMSAN: uninit-value in vti6_tnl_xmit net	7	syz			60	2805d	2829d	11/29	2800d	cb9f1b783850 ip: validate header length on virtual device xmit
KASAN: invalid-free in x25_asy_free net	24	syz, C			67	2812d	2818d	11/29	2800d	d5c7c745f254 net/wan: fix a double free in x25_asy_open_tty()
KMSAN: uninit-value in check_6rd net	7	syz, C			81	2807d	2829d	11/29	2800d	cb9f1b783850 ip: validate header length on virtual device xmit
KASAN: slab-out-of-bounds Read in tun_net_xmit (2) net	17	syz, C			10	2817d	2984d	11/29	2800d	aff6db454599 ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
KMSAN: kernel-infoleak in capi_unlocked_ioctl net	9	syz, C			109	2805d	2816d	11/29	2800d	d63967e475ae isdn: fix kernel-infoleak in capi_unlocked_ioctl
BUG: corrupted list in ___neigh_create net	8	syz, C			706	2834d	2837d	11/29	2805d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KASAN: use-after-free Read in __ipv6_addr_type net	19				1	2826d	2826d	11/29	2805d	cbb49697d551 ipv6: tunnels: fix two use-after-free
BUG: corrupted list in neigh_mark_dead net	8	syz, C			4117	2834d	2837d	11/29	2805d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KMSAN: uninit-value in __inet6_bind net	7	syz, C			56	2807d	2836d	11/29	2805d	fb2427454631 ipv6: explicitly initialize udp6_addr in udp_sock_create6()
KASAN: slab-out-of-bounds Read in neigh_mark_dead net	17				12	2834d	2837d	11/29	2805d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KASAN: slab-out-of-bounds Read in ___neigh_create net	17				1	2837d	2837d	11/29	2805d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
general protection fault in inet_lhash2_lookup net	2	syz, C			1137	2829d	2832d	11/29	2805d	eedbbb0d98b2 net: dccp: initialize (addr,port) listening hashtable
general protection fault in inet6_lhash2_lookup net	2	syz, C			718	2829d	2832d	11/29	2805d	eedbbb0d98b2 net: dccp: initialize (addr,port) listening hashtable
KASAN: use-after-free Read in neigh_mark_dead net	19	syz, C			858	2834d	2837d	11/29	2805d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KMSAN: uninit-value in packet_sendmsg net	7				5	2854d	2829d	11/29	2805d	99137b7888f4 packet: validate address length
general protection fault in __ipv6_sock_mc_join net	2	syz, C			9	2832d	2837d	11/29	2805d	fb83ed496b9a tipc: compare remote and local protocols in tipc_udp_enable()
KASAN: use-after-free Read in ___neigh_create net	19	syz, C			164	2834d	2837d	11/29	2805d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KASAN: use-after-free Read in vhost_transport_send_pkt kvm net virt	19	syz			36	2843d	2970d	11/29	2829d	834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KMSAN: kernel-infoleak in _copy_to_iter (4) net	9	syz, C			56	2844d	2848d	11/29	2829d	688838934c23 rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
KASAN: use-after-free Read in vhost_work_queue kvm net virt	19	syz			30	2841d	2941d	11/29	2829d	834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in vhost_transport_cancel_pkt kvm net virt	19	syz			17	2868d	2912d	11/29	2829d	834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KMSAN: uninit-value in dev_mc_add_excl net	7	syz, C			13	2869d	2881d	11/29	2864d	da71577545a5 rtnetlink: Disallow FDB configuration for non-Ethernet device
KMSAN: uninit-value in dev_uc_add_excl net	7	syz, C			20	2876d	2917d	11/29	2864d	da71577545a5 rtnetlink: Disallow FDB configuration for non-Ethernet device
KASAN: use-after-free Read in tcf_block_find net	19	syz, C			27	2906d	2912d	11/29	2864d	460b360104d5 net_sched: fix a crash in tc_new_tfilter()
general protection fault in __skb_flow_dissect (2) net	2	syz, C			11	2912d	2920d	11/29	2864d	d0e13a1488ad flow_dissector: lookup netns by skb->sk if skb->dev is NULL
KASAN: slab-out-of-bounds Read in refcount_inc_not_zero_checked bpf net	17				2	2890d	2891d	11/29	2864d	5032d079909d bpf: skmsg, fix psock create on existing kcm/tls port
KASAN: use-after-free Read in __dev_queue_xmit (3) net	19				11	2907d	2910d	11/29	2864d	460b360104d5 net_sched: fix a crash in tc_new_tfilter()
KMSAN: uninit-value in ip_tunnel_lookup (2) net	7	syz, C			2	2882d	2883d	11/29	2864d	b0350d51f001 ip_gre: fix parsing gre header in ipgre_err
WARNING in tcp_cleanup_ulp net	-1	syz			16	2891d	2892d	11/29	2864d	aadd4355918f tcp, ulp: remove socket lock assertion on ULP cleanup
general protection fault in dev_gro_receive (2) net	2	syz			4	2889d	2896d	11/29	2864d	ece23711dd95 net: Properly unlink GRO packets on overflow.
WARNING in tcp_close net	-1	syz			284	2886d	2986d	11/29	2864d	8873c064d1de tcp: do not release socket ownership in tcp_close()
general protection fault in netdev_master_upper_dev_get net	2				1	2883d	2882d	11/29	2864d	aab456dfa404 net/neigh: fix NULL deref in pneigh_dump_table()
KASAN: use-after-free Read in kfree_skb net	19				1	2886d	2886d	11/29	2864d	604d415e2bd6 llc: do not use sk_eat_skb()
WARNING: refcount bug in qdisc_put net	13				5	2908d	2908d	11/29	2864d	460b360104d5 net_sched: fix a crash in tc_new_tfilter()
kernel BUG at include/linux/skbuff.h:LINE! net	-1				3	2977d	2985d	11/29	2877d	bab2c80e5a6c nsh: set mac len based on inner packet
KMSAN: kernel-infoleak in _copy_to_iter (3) net	9	syz, C			36	2879d	2890d	11/29	2878d	b06f9d9f1a90 tipc: fix info leak from kernel tipc_event
KASAN: use-after-free Read in inet6_mc_check net	19				1	2895d	2895d	11/29	2878d	dc012f3628ea ipv6: mcast: fix a use-after-free in inet6_mc_check
KASAN: use-after-free Read in __llc_lookup_established net	19				1	2898d	2897d	11/29	2878d	5a8e7aea953b llc: set SOCK_RCU_FREE in llc_sap_add_socket()
KASAN: slab-out-of-bounds Read in _decode_session6 net	17	syz, C			35	2878d	2936d	11/29	2878d	9f7e43da6ae4 net/xfrm: fix out-of-bounds packet access
kernel BUG at net/core/dev.c:LINE! (2) net	-1	syz			2	2898d	2898d	11/29	2890d	52b5d6f5dcf0 net: make skb_partial_csum_set() more robust against overflows
WARNING in __skb_flow_dissect net	-1	syz			3	2897d	2898d	11/29	2897d	af3fb24eecb2 tun: napi flags belong to tfile
general protection fault in dev_gro_receive net	2	syz			8	2899d	2910d	11/29	2897d	af3fb24eecb2 tun: napi flags belong to tfile
possible deadlock in flush_workqueue net	4	syz, C			73762	2904d	2946d	11/29	2897d	d4859d749aa7 net-backports: bonding: avoid possible dead-lock
KASAN: use-after-free Read in rawv6_sendmsg net	19	syz, C			84	2898d	2930d	11/29	2897d	a688caa34beb net-backports: ipv6: take rcu lock in rawv6_send_hdrinc()
possible deadlock in rtnetlink_rcv_msg net	4				1	2921d	2920d	11/29	2897d	d4859d749aa7 net-backports: bonding: avoid possible dead-lock
INFO: trying to register non-static key in tun_chr_write_iter net	-1				14	2898d	2910d	11/29	2897d	c7256f579f83 tun: initialize napi_mutex unconditionally
WARNING in rollback_registered_many net	-1				1	2908d	2908d	11/29	2897d	0e1d6eca5113 rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
KASAN: use-after-free Read in ip_cmsg_recv_offset net	19	syz, C			9	2906d	2909d	11/29	2897d	64199fc0a46b net-backports: ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
possible deadlock in team_vlan_rx_add_vid net	4	syz			5	2926d	2960d	11/29	2897d	471b83bd8bbe team: Forbid enslaving team device to itself
KMSAN: uninit-value in ip6_tnl_start_xmit net	7	syz, C			69	2910d	2921d	11/29	2897d	76c0ddd8c3a6 ip6_tunnel: be careful when accessing the inner header
KMSAN: uninit-value in pppoe_rcv net	7	syz, C			2	3056d	2926d	11/29	2897d	8540827ebac6 pppoe: fix reception of frames with no mac header
WARNING: suspicious RCU usage in inet_csk_route_req net	4	syz, C			43	2904d	3139d	11/29	2897d	1ad98e9d1bdf tcp/dccp: fix lockdep issue when SYN is backlogged
KMSAN: kernel-infoleak in _copy_to_iter (2) net	9	syz, C			7	2905d	2933d	11/29	2900d	45c180bc29ba xfrm_user: prevent leaking 2 bytes of kernel memory
KMSAN: uninit-value in memcmp (2) net	7	syz, C			131	2925d	2916d	10/29	2915d	77d36398d99f net: fix uninit-value in __hw_addr_add_ex()
KASAN: use-after-free Write in ip6_dst_destroy net	22				1	2992d	2992d	10/29	2925d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
KASAN: stack-out-of-bounds Read in fib_table_lookup net	17				1	2984d	2984d	10/29	2927d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: global-out-of-bounds Read in ip6_xmit net	17				2	3108d	3108d	10/29	2927d	b954f94023dc l2tp: fix races with ipv4-mapped ipv6 addresses
KASAN: use-after-free Read in ip6_tnl_start_xmit net	19				1	3060d	3060d	10/29	2932d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KASAN: use-after-free Read in ip6_hold_safe net	19	syz, C			1	2967d	2967d	8/29	2941d	6d37fa49da1e l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
KASAN: use-after-free Read in iotlb_access_ok kvm net virt	19				1	2966d	2962d	8/29	2941d	b13f9c636437 vhost: reset metadata cache when initializing new IOTLB
WARNING: refcount bug in llc_sap_find net	13	syz, C			18	2960d	2962d	8/29	2941d	0dcb82254d65 llc: use refcount_inc_not_zero() for llc_sap_find()
possible deadlock in rhashtable_lookup_insert_fast net	4	syz, C			28	2952d	2955d	8/29	2941d	ff93bca76992 ila: make lockdep happy again
KASAN: use-after-free Write in ip6_hold_safe net	22	syz, C			25	2964d	2975d	8/29	2941d	6d37fa49da1e l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
KASAN: slab-out-of-bounds Write in eth_header_parse net	21	syz, C			7	2959d	2972d	8/29	2941d	4576cd469d98 packet: refine ring v3 block size test to hold one frame
WARNING: ODEBUG bug in vsock_stream_connect net virt	-1	syz, C			42	2961d	2970d	8/29	2941d	455f05ecd2b2 vsock: split dwork to avoid reinitializations
general protection fault in string (2) net	2				1	2966d	2966d	8/29	2941d	a6bcfc89694e net: check extack._msg before print
WARNING in refcount_inc (3) net	-1	syz, C			7	3090d	3090d	8/29	2945d	8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
kernel BUG at net/ipv6/route.c:LINE! net	-1	syz, C			197	2963d	2985d	8/29	2961d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
possible deadlock in bond_get_stats net	4	syz, C			11	2967d	2971d	8/29	2961d	7e2556e40026 bonding: avoid lockdep confusion in bond_get_stats()
WARNING in __ip6_make_skb net	-1	syz, C			1	2985d	2985d	8/29	2961d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
general protection fault in tcp_gso_segment net	2				1	2986d	2986d	8/29	2961d	ff907a11a0d6 net: skb_segment() should not return NULL
KASAN: use-after-free Read in refcount_sub_and_test_checked net	19				3	2966d	2968d	8/29	2961d	e6aed040eafb Revert "net/ipv6: fix metrics leak"
WARNING in ip6_sk_dst_lookup_flow net	-1	syz, C			2	2966d	2983d	8/29	2961d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
WARNING in ip6_setup_cork net	-1	syz, C			4	2965d	2985d	8/29	2961d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
KMSAN: kernel-infoleak in put_cmsg net	9	syz, C			3	2993d	2983d	8/29	2961d	2efd4fca703a ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
BUG: unable to handle kernel paging request in neigh_update net	8				1	2980d	2980d	8/29	2961d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
KASAN: use-after-free Write in dst_release (2) net	22	syz, C			3	2966d	2967d	8/29	2961d	e6aed040eafb Revert "net/ipv6: fix metrics leak"
KMSAN: kernel-infoleak in _copy_to_iter net	9	syz, C			285	2976d	3012d	8/29	2961d	45c180bc29ba xfrm_user: prevent leaking 2 bytes of kernel memory
KASAN: out-of-bounds Read in bpf_test_finish net bpf	17				9	2985d	2991d	8/29	2962d	6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
KASAN: slab-out-of-bounds Read in ipv6_gso_pull_exthdrs net	17	syz, C			4	3000d	3016d	8/29	2962d	bab2c80e5a6c nsh: set mac len based on inner packet
KASAN: stack-out-of-bounds Read in neigh_flush_dev net	17				1	2987d	2985d	8/29	2962d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in lock_sock_nested net	17				1	2984d	2984d	8/29	2962d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
KASAN: stack-out-of-bounds Read in netlink_has_listeners net	17				1	2984d	2984d	8/29	2962d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
general protection fault in __sock_release net	2				1	2981d	2981d	8/29	2962d	99ba2b5aba24 bpf: sockhash, disallow bpf_tcp_close and update in parallel
INFO: rcu detected stall in vprintk_emit net nfc	1	syz			2	2998d	3004d	8/29	2962d	3bc53be9db21 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
WARNING in set_precision net	-1	syz, C			140	2981d	3022d	8/29	2962d	c604cb767049 KEYS: DNS: fix parsing multiple options
KASAN: use-after-free Read in ipv6_gso_pull_exthdrs net	19	syz, C			5	2980d	3012d	8/29	2962d	bab2c80e5a6c nsh: set mac len based on inner packet
WARNING in iov_iter_revert net	-1	syz, C			74	2981d	3048d	8/29	2962d	32da12216e46 tls: Stricter error checking in zerocopy sendmsg path
general protection fault in do_tcp_getsockopt net	2	syz, C			9	2981d	2993d	8/29	2962d	6508b6781be0 tcp: cleanup copied_seq and urg_data in tcp_disconnect
KASAN: use-after-free Read in bpf_test_finish bpf net	19	syz, C			1211	2977d	2991d	8/29	2962d	6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
KASAN: use-after-free Write in skb_release_data net	22	syz, C			1903	3036d	3089d	8/29	2962d	993675a3100b packet: reset network header if packet shorter than ll reserved space
kernel BUG at net/packet/af_packet.c:LINE! (3) net	-1	syz			5	3112d	3159d	8/29	2970d	a6361f0ca4b2 packet: fix bitfield update race
KASAN: use-after-free Read in l2tp_session_create net	19				119	3098d	3165d	8/29	2980d	6b9f34239b00 l2tp: fix races in tunnel creation
KMSAN: uninit-value in ip_tunnel_xmit net	7	syz, C			2594	2983d	3070d	8/29	2983d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
WARNING: suspicious RCU usage in fib6_info_alloc net	4	syz			2	3073d	3072d	8/29	2991d	27b10608a2fe net/ipv6: Fix gfp_flags arg to addrconf_prefix_route
WARNING in bpf_int_jit_compile bpf net	-1	syz			11	2998d	3035d	8/29	2991d	9facc336876f bpf: reject any prog that failed read-only lock
possible deadlock in __might_fault (2) net	4	syz, C			20	3061d	3064d	8/29	2991d	05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KMSAN: uninit-value in _copy_to_iter (2) kvm net virt	7	syz, C			226	3022d	3068d	8/29	2991d	670ae9caaca4 vhost: fix info leak due to uninitialized memory
KASAN: slab-out-of-bounds Read in bpf_csum_update bpf net	17	syz, C			2	3029d	3026d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
possible deadlock in tcp_mmap net	4	syz, C			1908	3061d	3064d	8/29	2991d	05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KASAN: use-after-free Read in bpf_skb_change_proto bpf net	19				1	3021d	3020d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Write in prb_fill_curr_block net	22	syz, C			2	3029d	3029d	8/29	2991d	eb73190f4fbe net/packet: refine check for priv area size
WARNING in skb_warn_bad_offload (2) net	-1	syz, C			6	3063d	3063d	8/29	2991d	a8c744a8b437 udp: disable gso with no_check_tx
KASAN: slab-out-of-bounds Read in bpf_skb_vlan_push bpf net	17	syz			2	3017d	3017d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in skb_ensure_writable net bpf	19	syz, C			4	3020d	3026d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
WARNING: kmalloc bug in xdp_umem_create net bpf	-1	syz, C			7	3014d	3020d	8/29	2991d	a343993c518c xsk: silence warning on memory allocation failure
KASAN: use-after-free Write in tls_push_record net	22	syz, C			24	2991d	3036d	8/29	2991d	a447da7d0041 tls: fix use-after-free in tls_push_record
KASAN: use-after-free Read in fib6_table_lookup net	19				1	3013d	3012d	8/29	2991d	9b0a8da8c4c6 net/ipv6: respect rcu grace period before freeing fib6_info
INFO: rcu detected stall in skb_free_head net	1				4	3029d	3062d	8/29	2991d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
WARNING: lock held when returning to user space! (2) net	4	syz, C			9	3051d	3052d	8/29	2991d	9e5750106630 net/ipv6: fix lock imbalance in ip6_route_del()
INFO: rcu detected stall in corrupted net	1	syz			1	3040d	3040d	8/29	2991d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
INFO: rcu detected stall in ip_route_output_key_hash net	1				2	3042d	3045d	8/29	2991d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
BUG: unable to handle kernel NULL pointer dereference in corrupted net	10	syz, C			5	3022d	3022d	8/29	2991d	c0129a061442 smc: convert to ->poll_mask
KMSAN: uninit-value in eth_mac_addr net	7				2	2993d	3026d	8/29	2991d	644c7eebbfd5 rtnetlink: validate attributes in do_setlink()
INFO: rcu detected stall in dev_queue_xmit_nit net	1				1	3036d	3036d	8/29	2991d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
KASAN: slab-out-of-bounds Read in bpf_skb_change_proto net bpf	17	syz, C			2	3020d	3020d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
WARNING: possible circular locking dependency detected (4) net	-1	syz, C			27	3064d	3071d	8/29	2991d	05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
BUG: delta (-6195) <= 0 at net/dccp/ccids/ccid3.c:LINE/ccid3_hc_rx_send_feedback() net	-1				1	3008d	3008d	8/29	2991d	74174fe5634f net: dccp: avoid crash in ccid3_hc_rx_send_feedback()
KASAN: slab-out-of-bounds Read in ip6_xmit (3) net	17	syz, C			69	2996d	3039d	8/29	2991d	9901c5d77e96 bpf: sockmap, fix crash when ipv6 sock is added
KASAN: slab-out-of-bounds Read in skb_ensure_writable bpf net	17	syz, C			9	3017d	3026d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in bpf_csum_update bpf net	19	syz, C			1	3029d	3026d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
BUG: unable to handle kernel paging request in bpf_int_jit_compile bpf net	8	syz			2	3003d	3006d	8/29	2991d	85782e037f8a bpf: undo prog rejection on read-only lock failure
INFO: rcu detected stall in kfree_skbmem net	1				4	3030d	3061d	8/29	2991d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
KASAN: slab-out-of-bounds Write in prb_fill_curr_block net	21	syz, C			2	3029d	3029d	8/29	2991d	eb73190f4fbe net/packet: refine check for priv area size
WARNING: refcount bug in __udp_gso_segment net	13				2	3050d	3050d	8/29	2991d	575b65bc5bff udp: avoid refcount_t saturation in __udp_gso_segment()
KMSAN: uninit-value in rtnetlink_put_metrics net	7	syz			3	3025d	3026d	8/29	2991d	5b5e7a0de2bb net: metrics: add proper netlink validation
KASAN: slab-out-of-bounds Read in bpf_skb_change_head net bpf	17	syz, C			2	3016d	3016d	8/29	2991d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
INFO: rcu detected stall in ipv6_addr_label net	1				1	3125d	3125d	8/29	2991d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
KASAN: use-after-free Read in ip6_route_mpath_notify net	19	syz, C			25	3024d	3028d	8/29	2991d	f7225172f25a net/ipv6: prevent use after free in ip6_route_mpath_notify
KASAN: null-ptr-deref Write in xdp_umem_unaccount_pages bpf net	12	syz, C			25	3019d	3023d	8/29	2991d	c09290c56376 bpf, xdp: fix crash in xdp_umem_unaccount_pages
KASAN: slab-out-of-bounds Write in tls_push_record net	21				2	3006d	3020d	8/29	2991d	a447da7d0041 tls: fix use-after-free in tls_push_record
WARNING: suspicious RCU usage in rt6_remove_exception_rt net	4	syz			1761	3066d	3067d	8/29	2991d	091311debcf0 net/ipv6: fix LOCKDEP issue in rt6_remove_exception_rt()
KASAN: use-after-free Read in skb_dequeue net	19	syz, C			4	3009d	3009d	8/29	2991d	945d015ee0c3 net/packet: fix use-after-free
KASAN: null-ptr-deref Read in refcount_sub_and_test net	11	syz, C			4	3071d	3072d	8/29	2991d	263243d6c257 net/ipv6: Fix ip6_convert_metrics() bug
INFO: rcu detected stall in __ipv6_dev_get_saddr net	1				1	3031d	3031d	8/29	2991d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
WARNING: suspicious RCU usage in rt6_check_expired net	4				4	3068d	3068d	8/29	2991d	c3c14da0288d net/ipv6: add rcu locking to ip6_negative_advice
INFO: trying to register non-static key in tun_do_read net	-1	syz, C			28	3047d	3053d	5/29	3012d	7063efd33bb1 tuntap: fix use after free during release
KASAN: use-after-free Read in iptunnel_handle_offloads net	19	syz, C			133	3037d	3083d	5/29	3012d	9aad13b087ab packet: fix reserve calculation
BUG: soft lockup in _decode_session6 net	1	syz, C			1	3049d	3049d	5/29	3023d	d9f92772e8ec xfrm6: avoid potential infinite loop in _decode_session6()
kernel BUG at net/ipv4/tcp_output.c:LINE! (2) net	-1	syz			23	3054d	3160d	5/29	3023d	7f582b248d0a tcp: purge write queue in tcp_connect_init()
BUG: spinlock bad magic in tun_do_read net	4	syz			1	3053d	3053d	5/29	3023d	b196d88aba8a tun: fix use after free for ptr_ring
general protection fault in mr_mfc_find_parent net	2				2	3035d	3041d	5/29	3023d	66fb33254f45 ipmr: properly check rhltable_init() return value
WARNING in kcm_exit_net (3) net	-1	syz			5	3030d	3030d	5/29	3023d	eb7f54b90bd8 kcm: Fix use-after-free caused by clonned sockets
KASAN: use-after-free Read in __sk_free net	19				1	3044d	3044d	5/29	3023d	9709020c86f6 sock_diag: fix use-after-free read in __sk_free
KASAN: use-after-free Read in skb_copy_datagram_iter net	19	syz, C			7	3058d	3096d	5/29	3023d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KASAN: use-after-free Read in copyout net	19	syz, C			11	3040d	3097d	5/29	3023d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KASAN: use-after-free Read in __dev_queue_xmit (2) net	19	syz, C			2	3040d	3040d	5/29	3023d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KASAN: use-after-free Read in timer_is_static_object net	19				1	3044d	3044d	5/29	3023d	2677d2067731 dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect()
KASAN: use-after-free Read in sock_recv_errqueue net	19				1	3046d	3046d	5/29	3023d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KMSAN: uninit-value in move_addr_to_user (2) net	7	syz, C			44	3045d	3052d	5/29	3044d	09c8b9718a7a tipc: fix one byte leak in tipc_sk_set_orig_addr()
WARNING in xfrm6_tunnel_net_exit net	-1	syz			14002	3047d	3177d	5/29	3044d	b48c05ab5d32 xfrm: Fix warning in xfrm6_tunnel_net_exit.
KASAN: slab-out-of-bounds Read in pfkey_add net	17	syz, C			835	3049d	3196d	5/29	3044d	4b66af2d6356 af_key: Always verify length of provided sadb_key
BUG: MAX_LOCK_DEPTH too low! net	-1				1	3060d	3060d	5/29	3044d	af50e4ba34f4 nsh: fix infinite loop
INFO: task hung in sock_sendmsg net	1				1	3081d	3081d	5/29	3044d	8236b0ae31c8 bdi: wake up concurrent wb_shutdown() callers.
KASAN: use-after-free Read in tls_sk_proto_close (2) net	19	syz, C			297	3049d	3056d	5/29	3044d	98f0a39529e5 tls: fix use after free in tls_sk_proto_close
KASAN: use-after-free Read in perf_trace_rpc_stats_latency net nfs	19				1	3061d	3061d	5/29	3044d	98eb6cf25f03 sunrpc: Fix latency trace point crashes
WARNING in tcp_mark_head_lost net	-1	syz, C			18	3054d	3136d	5/29	3045d	16ae6aa17052 net-backports: tcp: ignore Fast Open on repair mode
KMSAN: uninit-value in put_cmsg net	7	syz, C			2	3059d	3059d	5/29	3045d	eb80ca476ec1 rds: do not leak kernel memory to user land
WARNING in tcp_sacktag_write_queue net	-1	syz, C			8	3061d	3133d	5/29	3045d	bf2acc943a45 tcp: fix TCP_REPAIR_QUEUE bound checking
KMSAN: uninit-value in rt6_multipath_hash net	7	syz, C			3	3046d	3063d	5/29	3045d	cea67a2dd6b2 ipv6: fix uninit-value in ip6_multipath_l3_keys()
KASAN: use-after-free Read in __dev_queue_xmit net	19	syz, C			10	3059d	3177d	5/29	3052d	d0c081b49137 flow_dissector: properly cap thoff field
KASAN: use-after-free Read in ip6_xmit net	19	syz, C			5174	3099d	3177d	5/29	3052d	c113187d38ff tls: Use correct sk->sk_prot for IPV6
KASAN: use-after-free Read in work_is_static_object net	19				3	3158d	3173d	5/29	3052d	2cc683e88c0c kcm: lock lower socket in kcm_attach
KASAN: out-of-bounds Read in ip6_xmit net	17				2	3111d	3153d	5/29	3052d	b954f94023dc l2tp: fix races with ipv4-mapped ipv6 addresses
KASAN: stack-out-of-bounds Write in ipip6_tunnel_locate net	21	syz, C			33	3078d	3086d	5/29	3053d	b95211e066fc ipv6: sit: better validate user provided tunnel names
KMSAN: uninit-value in netlink_sendmsg net	7	syz, C			2493	3053d	3084d	5/29	3053d	6091f09c2f79 netlink: fix uninit-value in netlink_sendmsg
KMSAN: uninit-value in netif_skb_features net	7	syz, C			119	3053d	3079d	5/29	3053d	7ce2367254e8 vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
KASAN: use-after-free Read in llc_conn_ac_send_sabme_cmd_p_set_x net	19				1	3076d	3075d	5/29	3053d	f7e43672683b llc: hold llc_sap before release_sock()
KASAN: use-after-free Read in pppol2tp_connect (3) net	19	syz, C			22	3079d	3097d	5/29	3053d	6b9f34239b00 l2tp: fix races in tunnel creation
KMSAN: uninit-value in inet_csk_bind_conflict net	7	syz, C			446	3053d	3084d	5/29	3053d	3099a5291893 soreuseport: initialise timewait reuseport field
KMSAN: uninit-value in fib6_new_table net	7	syz, C			3	3069d	3070d	5/29	3053d	aa8f8778493c ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
KMSAN: uninit-value in move_addr_to_user net	7	syz, C			74	3053d	3084d	5/29	3053d	6780db244d6b sctp: do not leak kernel memory to user space
KASAN: stack-out-of-bounds Write in ip6_tnl_locate net	21				4	3079d	3081d	5/29	3053d	db7a65e3ab78 ip6_tunnel: better validate user provided tunnel names
WARNING in strp_done net	-1	syz, C			2336	3087d	3136d	5/29	3053d	dff8baa26117 kcm: Call strp_stop before strp_done in kcm_attach
KMSAN: uninit-value in neigh_dump_info net	7	syz, C			6	3065d	3080d	5/29	3053d	7dd07c143a4b net: validate attribute sizes in neigh_dump_table()
possible deadlock in rtnl_lock (5) net	4	syz, C			1009	3066d	3095d	5/29	3053d	5c64576a7789 ipvs: fix rtnl_lock lockups caused by start_sync_thread
KMSAN: uninit-value in inet6_rtm_delroute net	7	syz, C			9	3072d	3084d	5/29	3053d	b1993a2de12c net: fix rtnh_ok()
WARNING: kobject bug in netdev_queue_update_kobjects net	-1	syz, C			27	3055d	3117d	5/29	3053d	3e14c6abbfb5 kobject: don't use WARN for registration failures
KMSAN: uninit-value in ip_route_output_key_hash_rcu net	7				179	3053d	3084d	5/29	3053d	d0ea2b125005 ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
BUG: corrupted list in team_nl_cmd_options_set net	8	syz, C			2	3076d	3079d	5/29	3053d	4fb0534fb7bb team: avoid adding twice the same option to the event list
KASAN: stack-out-of-bounds Write in ip6gre_tunnel_locate net	21	syz, C			923	3078d	3086d	5/29	3053d	5f42df013b8b ip6_gre: better validate user provided tunnel names
KASAN: stack-out-of-bounds Write in __ip_tunnel_create net	21	syz, C			29	3079d	3086d	5/29	3053d	9cb726a212a8 ip_tunnel: better validate user provided tunnel names
KASAN: use-after-free Write in dst_release net	22	syz, C			832	3078d	3089d	5/29	3053d	bfacfb457b36 pptp: remove a buggy dst release in pptp_connect()
KMSAN: uninit-value in strlcpy net	7	syz, C			2	3055d	3055d	5/29	3053d	537b361fbcbc vti6: better validate user provided tunnel names
KMSAN: uninit-value in pppol2tp_connect net	7	syz, C			13	3053d	3068d	5/29	3053d	eb1c28c05894 l2tp: check sockaddr length in pppol2tp_connect()
KASAN: null-ptr-deref Read in refcount_inc_not_zero net	11	syz, C			2352	3066d	3068d	5/29	3053d	3a04ce7130a7 llc: fix NULL pointer deref for SOCK_ZAPPED
KMSAN: uninit-value in inet_getpeer net	7	syz, C			54	3053d	3082d	5/29	3053d	b6a37e5e2541 inetpeer: fix uninit-value in inet_getpeer
KMSAN: uninit-value in fib_create_info net	7	syz, C			19	3078d	3084d	5/29	3053d	b1993a2de12c net: fix rtnh_ok()
BUG: sleeping function called from invalid context at net/core/sock.c:LINE (3) net	-1	syz, C			234	3130d	3133d	5/29	3053d	26736a08ee0f tipc: don't call sock_release() in atomic context
KASAN: use-after-free Read in llc_conn_tmr_common_cb net	19				1	3074d	3072d	5/29	3053d	b905ef9ab901 llc: delete timers synchronously in llc_sk_free()
KMSAN: uninit-value in tcp_parse_options net	7	syz, C			38	3054d	3080d	5/29	3053d	721230326891 tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
KMSAN: uninit-value in __skb_try_recv_from_queue net	7	syz, C			108	3053d	3084d	5/29	3053d	b13dda9f9aa7 net: initialize skb->peeked when cloning
KMSAN: uninit-value in memcmp net	7	syz, C			30	3054d	3084d	5/29	3053d	77d36398d99f net: fix uninit-value in __hw_addr_add_ex()
KMSAN: uninit-value in packet_set_ring net	7	syz, C			6	3059d	3076d	5/29	3053d	5171b37d9596 net: af_packet: fix race in PACKET_{R|T}X_RING
kernel BUG at drivers/vhost/vhost.c:LINE! (2) virt kvm net	-1	syz, C			139	3054d	3085d	5/29	3053d	d14d2b78090c vhost: fix vhost_vq_access_ok() log check
KMSAN: uninit-value in pppoe_connect net	7				47	3053d	3068d	5/29	3053d	a49e2f5d5fb1 pppoe: check sockaddr length in pppoe_connect()
KASAN: use-after-free Read in perf_trace_lock_acquire (2) kvm net virt	19	syz, C			188	3148d	3220d	5/29	3066d	4cd879515d68 vhost_net: stop device during reset owner
KASAN: slab-out-of-bounds Write in tcp_v6_syn_recv_sock net	21	syz, C			1063	3161d	3178d	5/29	3066d	d91c3e17f75f net/tls: Only attach to sockets in ESTABLISHED state
possible deadlock in __neigh_create net	4				1	3090d	3090d	5/29	3080d	1bfa26ff8c4b ipv6: fix possible deadlock in rt6_age_examine_exception()
WARNING in skb_warn_bad_offload net	-1	syz, C			6527	3117d	3241d	5/29	3082d	8d74e9f88d65 net: avoid skb_warn_bad_offload on IS_ERR
possible deadlock in handle_rx virt kvm net	4	syz, C			4	3096d	3096d	5/29	3085d	aaa3149bbee9 vhost_net: add missing lock nesting notation
KASAN: use-after-free Read in worker_thread (2) net	19	syz			6	3225d	3234d	5/29	3085d	581e7226a5d4 kcm: Only allow TCP sockets to be attached to a KCM mux
BUG: unable to handle kernel paging request in __memmove net	8				1	3095d	3095d	5/29	3085d	c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
kernel BUG at ./include/linux/skbuff.h:LINE! (2) net	-1	syz, C			5	3122d	3099d	5/29	3085d	10b8a3de603d ipv6: the entire IPv6 header chain must fit the first fragment
BUG: unable to handle kernel paging request in netdev_queue_update_kobjects net	8	syz			1	3095d	3095d	5/29	3085d	c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
BUG: unable to handle kernel (2) net	-1	syz			1	3094d	3094d	5/29	3085d	c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
kernel BUG at drivers/vhost/vhost.c:LINE! kvm net virt	-1	syz, C			152	3085d	3103d	5/29	3085d	d65026c6c62e vhost: validate log when IOTLB is enabled
BUG: corrupted list in remove_wait_queue virt kvm net	8	syz, C			5	3098d	3101d	5/29	3085d	dc6455a71c7f vhost: correctly remove wait queue during poll failure
possible deadlock in __ipv6_dev_mc_dec net	4				1	3099d	3099d	5/29	3085d	1bfa26ff8c4b ipv6: fix possible deadlock in rt6_age_examine_exception()
INFO: rcu detected stall in xfrm_confirm_neigh net	1				7	3114d	3138d	4/29	3099d	013cb81e89f8 xfrm: Fix infinite loop in xfrm_get_dst_nexthop with transport mode.
KASAN: slab-out-of-bounds Read in ip6_xmit (2) net	17	syz, C			259	3101d	3115d	4/29	3099d	b954f94023dc l2tp: fix races with ipv4-mapped ipv6 addresses
WARNING: kmalloc bug in xfrm_add_sa net	-1	syz, C			109	3099d	3138d	4/29	3099d	d97ca5d714a5 xfrm_user: uncoditionally validate esn replay attribute struct
KASAN: use-after-free Read in pfifo_fast_enqueue net	19	syz, C			20	3100d	3165d	4/29	3099d	cce6294cc2ea net: sched: fix uses after free
KASAN: use-after-free Read in pppol2tp_connect (2) net	19	syz, C			10	3099d	3114d	4/29	3099d	17cfe79a65f9 l2tp: do not accept arbitrary sockets
general protection fault in dccp_write_xmit net	2	syz, C			5	3116d	3152d	4/29	3099d	67f93df79aee dccp: check sk for closed state in dccp_sendmsg()
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock net	21	syz, C			4	3116d	3116d	4/29	3099d	17cfe79a65f9 l2tp: do not accept arbitrary sockets
KASAN: stack-out-of-bounds Read in xfrm_state_find (4) net	17	syz, C			102	3099d	3150d	4/29	3099d	19d7df69fdb2 xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems
WARNING in kmalloc_slab (4) net	-1				1	3110d	3109d	4/29	3099d	d97ca5d714a5 xfrm_user: uncoditionally validate esn replay attribute struct
KASAN: use-after-free Read in strp_data_ready net	19	syz, C			204	3156d	3249d	4/29	3110d	581e7226a5d4 kcm: Only allow TCP sockets to be attached to a KCM mux
WARNING in debug_print_object net	-1	syz, C			2	3149d	3149d	4/29	3116d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
KASAN: slab-out-of-bounds Read in ip6_xmit net	17	syz, C			156	3117d	3167d	4/29	3116d	c113187d38ff tls: Use correct sk->sk_prot for IPV6
KASAN: use-after-free Read in inet_shutdown net	19	syz, C			22	3118d	3165d	4/29	3116d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
general protection fault in pppol2tp_connect net	2	syz, C			1025	3116d	3165d	4/29	3116d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
KASAN: use-after-free Read in pppol2tp_connect net	19	syz, C			25	3116d	3165d	4/29	3116d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
WARNING in kvmalloc_node net bpf	-1	syz, C			513	3130d	3136d	4/29	3124d	7fc17e909edf bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
WARNING in kmalloc_slab (3) net	-1	syz, C			1901	3125d	3209d	4/29	3124d	88913bd8ea2a kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE
possible deadlock in rtnl_lock (4) net	4	syz, C			73333	3126d	3142d	4/29	3124d	01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
WARNING: kmalloc bug in cpu_map_update_elem bpf net	-1	syz, C			2677	3124d	3135d	4/29	3124d	7fc17e909edf bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
KASAN: use-after-free Read in sock_release net	19				1	3217d	3213d	4/29	3136d	a5739435b5a3 fix kcm_clone()
possible deadlock in flush_work (2) nfs net	4				3	3234d	3237d	4/29	3136d	528fd3547bad SUNRPC: Destroy transport from the system workqueue
KASAN: stack-out-of-bounds Read in csum_and_copy_from_iter_full net	17				1	3215d	3211d	4/29	3136d	8f659a03a0ba net: ipv4: fix for a race condition in raw_sendmsg
KASAN: stack-out-of-bounds Read in memcmp net	17				1	3179d	3175d	4/29	3137d	732706afe1cc xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.
KASAN: stack-out-of-bounds Read in xfrm_selector_match net	17				368	3170d	3176d	4/29	3137d	732706afe1cc xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.
WARNING: kmalloc bug in tun_device_event net	-1	syz, C			15	3141d	3143d	4/29	3138d	6e6e41c31122 ptr_ring: fail early if queue occupies more than KMALLOC_MAX_SIZE 0bf7800f1799 ptr_ring: try vmalloc() when kmalloc() fails
possible deadlock in rtnl_lock (3) net	4	syz, C			3633	3143d	3144d	4/29	3143d	3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
WARNING: bad unlock balance in ipmr_mfc_seq_stop net	4	syz, C			286	3150d	3196d	4/29	3144d	4adfa79fc254 ip6mr: fix stale iterator
possible deadlock in rtnl_lock (2) net	4	syz, C			10369	3145d	3149d	4/29	3145d	3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
WARNING in reuseport_add_sock net	-1	syz, C			7	3158d	3168d	4/29	3145d	4db428a7c9ab soreuseport: fix mem leak in reuseport_add_sock()
suspicious RCU usage at ./include/linux/inetdevice.h:LINE (2) net	-1	syz, C			4	3149d	3149d	4/29	3145d	e7aadb27a541 net: igmp: add a missing rcu locking section
KASAN: use-after-free Read in __list_add_valid (3) kvm net virt	19				16	3149d	3156d	4/29	3146d	4cd879515d68 vhost_net: stop device during reset owner
KASAN: use-after-free Read in fib6_remove_prefsrc net	19				4	3166d	3168d	4/29	3146d	591ff9ea51ce ipv6: don't let tb6_root node share routes with other node
KASAN: use-after-free Read in fib6_lookup_1 net	19				11	3166d	3168d	4/29	3146d	591ff9ea51ce ipv6: don't let tb6_root node share routes with other node
INFO: task hung in bpf_exit_net net	1				1	3207d	3193d	4/29	3146d	b6c5734db070 sctp: fix the handling of ICMP Frag Needed for too small MTUs
KASAN: use-after-free Read in fib6_age net	19				3	3166d	3168d	4/29	3146d	591ff9ea51ce ipv6: don't let tb6_root node share routes with other node
INFO: trying to register non-static key in pfifo_fast_reset net	-1	syz, C			4	3192d	3195d	4/29	3146d	1df94c3c5dad net_sched: properly check for empty skb array on error path
suspicious RCU usage at net/ipv6/ip6_fib.c:LINE net	-1	syz, C			56	3156d	3178d	4/29	3148d	4512c43eac7e ipv6: remove null_entry before adding default route
general protection fault in __netlink_ns_capable net	2	syz, C			74	3172d	3179d	4/29	3149d	f428fe4a04cc rtnetlink: give a user socket to get_target_net()
KASAN: double-free or invalid-free in skb_free_head net virt	24	syz, C			13	3188d	3194d	4/29	3149d	d76c68109f37 crypto: pcrypt - fix freeing pcrypt instances
general protection fault in tun_queue_purge net	2	syz, C			4	3155d	3156d	4/29	3149d	9fb582b67072 Revert "net: ptr_ring: otherwise safe empty checks can overrun array bounds"
suspicious RCU usage at ./include/linux/inetdevice.h:LINE net	-1				28	3232d	3240d	4/29	3149d	25dd169aea65 fib: fib_dump_info can no longer use __in_dev_get_rtnl
WARNING in vhost_dev_cleanup net virt kvm	-1	syz, C			4	3150d	3156d	4/29	3149d	4cd879515d68 vhost_net: stop device during reset owner
inconsistent lock state in est_fetch_counters net	4	syz, C			5829	3149d	3154d	4/29	3149d	40ca54e3a686 net_sched: gen_estimator: fix lockdep splat
general protection fault in fib6_add (2) net	2	syz, C			3143	3172d	3178d	4/29	3149d	7bbfe00e0252 ipv6: fix general protection fault in fib6_add()
KASAN: use-after-free Read in __xfrm_state_lookup net	19	syz, C			7	3241d	3241d	4/29	3149d	cb79a180f2e7 xfrm: defer daddr pointer assignment after spi parsing
KASAN: slab-out-of-bounds Read in xfrm_hash_rebuild net	17	syz, C			18	3167d	3234d	4/29	3149d	862591bf4f51 xfrm: skip policies marked as dead while rehashing
WARNING in xdp_rxq_info_unreg bpf net	-1	syz, C			198	3158d	3159d	4/29	3149d	c13da21cdb80 tun: avoid calling xdp_rxq_info_unreg() twice
possible deadlock in rtnl_lock net	4	syz, C			15711	3149d	3206d	4/29	3149d	124da8f6118b tuntap: fix possible deadlock when fail to register netdev
KASAN: slab-out-of-bounds Read in erspan_xmit net	17	syz, C			51	3156d	3159d	4/29	3149d	b423d13c08a6 net: erspan: fix use-after-free
KASAN: use-after-free Read in erspan_build_header net	19	syz, C			60	3149d	3159d	4/29	3149d	b423d13c08a6 net: erspan: fix use-after-free
KASAN: slab-out-of-bounds Read in erspan_build_header net	17	syz, C			30	3149d	3158d	4/29	3149d	b423d13c08a6 net: erspan: fix use-after-free
KASAN: use-after-free Read in erspan_xmit net	19	syz, C			68	3156d	3159d	4/29	3149d	b423d13c08a6 net: erspan: fix use-after-free
KASAN: stack-out-of-bounds Read in xfrm_state_find (3) net	17	syz, C			10353	3154d	3222d	4/29	3150d	732706afe1cc xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.
WARNING in xfrm_state_fini net	-1	syz, C			2231	3166d	3221d	4/29	3150d	6a53b7593233 xfrm: check id proto in validate_tmpl()
kernel BUG at net/l2tp/l2tp_ppp.c:LINE! net	-1	syz, C			22	3156d	3178d	4/29	3152d	e5571240236c kcm: Check if sk_user_data already set in kcm_attach
possible deadlock in vhost_chr_write_iter kvm net virt	4	syz, C			25952	3156d	3159d	4/29	3152d	e9cb4239134c vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
kernel BUG at net/core/skbuff.c:LINE! (2) net	-1	syz, C			562	3154d	3243d	4/29	3152d	02612bb05e51 pppoe: take ->needed_headroom of lower device into account on xmit
KASAN: slab-out-of-bounds Read in __dev_queue_xmit net	17	syz, C			6	3174d	3162d	4/29	3152d	7c68d1a6b4db net: qdisc_pkt_len_init() should be more robust
KASAN: use-after-free Read in psock_write_space net	19	syz, C			6	3161d	3172d	4/29	3152d	581e7226a5d4 kcm: Only allow TCP sockets to be attached to a KCM mux
KASAN: use-after-free Read in fib6_add_1 net	19	syz, C			4	3166d	3168d	4/29	3156d	591ff9ea51ce net-backports: ipv6: don't let tb6_root node share routes with other node
KASAN: stack-out-of-bounds Read in __nla_put net	17	syz, C			57	3161d	3165d	4/29	3159d	cd443f1e91ca netlink: reset extack earlier in netlink_rcv_skb
general protection fault in strlen net	2	syz, C			53	3161d	3163d	4/29	3159d	cd443f1e91ca netlink: reset extack earlier in netlink_rcv_skb
suspicious RCU usage at ./include/linux/rcupdate.h:LINE (2) net	-1	syz, C			174	3160d	3240d	4/29	3159d	2f10a61cee8f xfrm: fix rcu usage in xfrm_get_type_offload
KASAN: use-after-free Read in tls_sk_proto_close net	19	syz, C			9	3164d	3172d	4/29	3159d	d91c3e17f75f net/tls: Only attach to sockets in ESTABLISHED state
BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:LINE net	-1				20	3167d	3175d	4/29	3159d	b1bdcb59b64f xfrm: don't call xfrm_policy_cache_flush while holding spinlock
general protection fault in ip6_xmit net	2				16	3160d	3161d	4/29	3159d	591ff9ea51ce ipv6: don't let tb6_root node share routes with other node
WARNING in netlink_ack (2) net	-1	syz, C			6	3171d	3171d	4/29	3159d	cbbdf8433a5f netlink: extack needs to be reset each time through loop
KASAN: use-after-free Read in fib6_ifup (2) net	19	syz, C			18	3166d	3162d	4/29	3159d	591ff9ea51ce ipv6: don't let tb6_root node share routes with other node
kernel BUG at ./include/linux/skbuff.h:LINE! net	-1	syz, C			4502	3164d	3177d	4/29	3159d	374d1b5a81f7 esp: Fix GRO when the headers not fully in the linear part of the skb.
BUG: unable to handle kernel paging request in dst_release net	8				113	3164d	3169d	4/29	3159d	95ef498d977b ipv6: ip6_make_skb() needs to clear cork.base.dst
KASAN: use-after-free Read in fib6_ifdown net	19	syz, C			26	3166d	3169d	3/29	3162d	4512c43eac7e ipv6: remove null_entry before adding default route
KASAN: use-after-free Read in rt6_mtu_change_route net	19				5	3166d	3169d	3/29	3162d	4512c43eac7e ipv6: remove null_entry before adding default route
WARNING in strp_data_ready net	-1	syz, C			59034	3178d	3249d	3/29	3164d	d66fa9ec53c4 strparser: Call sock_owned_by_user_nocheck
INFO: task hung in cleanup_net net	1				1	3205d	3193d	3/29	3178d	21b594435005 net: Fix double free and memory corruption in get_net_ns_by_id()
WARNING in netlink_ack net	-1	syz, C			6	3188d	3190d	3/29	3185d	48044eb490be netlink: fix netlink_ack() extack race
kernel BUG at net/packet/af_packet.c:LINE! (2) net	-1				2	3209d	3211d	3/29	3185d	8e1611e23579 make sock_alloc_file() do sock_release() on failures
WARNING in refcount_dec (2) net	-1				1	3219d	3219d	3/29	3185d	15fe076edea7 net/packet: fix a race in packet_bind() and packet_notifier()
kernel BUG at net/core/dev.c:LINE! net	-1	syz, C			5	3215d	3220d	3/29	3204d	15fe076edea7 net-backports: net/packet: fix a race in packet_bind() and packet_notifier()
general protection fault in fanout_demux_rollover net	2				3	3218d	3237d	3/29	3204d	57f015f5eccf packet: fix crash in fanout_demux_rollover()
WARNING in fib6_add net	-1	syz, C			8225	3231d	3255d	3/29	3214d	2ea2352ede9d ipv6: prevent user from adding cached routes
KASAN: use-after-free Read in free_netdev net	19	syz, C			42	3232d	3255d	3/29	3214d	aec72f3392b1 net-tun: fix panics at dismantle time
KASAN: use-after-free Write in detach_if_pending net	22	syz, C			4169	3251d	3246d	3/29	3214d	ee74d9967b82 tun: do not arm flow_gc_timer in tun_flow_init()
BUG: unable to handle kernel paging request in vsock_diag_dump net virt	8	syz, C			6	3246d	3249d	3/29	3214d	c1eef220c176 vsock: always call vsock_init_tables()
INFO: trying to register non-static key. (2) net	-1	syz, C			8624	3233d	3235d	3/29	3214d	9eba9353388d tcp: fix a lockdep issue in tcp_fastopen_reset_cipher()
WARNING in tun_get_user net	-1	syz, C			17398	3231d	3256d	3/29	3214d	010f245b9dd7 net-backports: tun: relax check on eth_get_headlen() return value
KASAN: use-after-free Read in tcp_ack net	19				68	3227d	3229d	3/29	3214d	50895b9de1d3 net-backports: tcp: highest_sack fix
WARNING in tcp_update_reordering net	-1				748	3224d	3222d	3/29	3221d	0eb96bf754d7 tcp: fix tcp_fastretrans_alert warning
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) net	17	syz, C			93	3232d	3241d	3/29	3224d	c9f3f813d462 xfrm: Fix stack-out-of-bounds read in xfrm_state_find.
WARNING in refcount_add_not_zero net	-1				70	3224d	3241d	3/29	3224d	7ec318feeed1 tcp: gso: avoid refcount_t warning from tcp_gso_segment()
WARNING in reuseport_alloc net	-1	syz, C			408	3231d	3255d	3/29	3231d	1b5f962e71bf soreuseport: fix initialization race
general protection fault in ip6_setup_cork net	2				56	3246d	3255d	3/29	3231d	864e2a1f8aac net-backports: ipv6: flowlabel: do not leave opt->tot_len with garbage
KASAN: use-after-free Read in packet_getsockopt (2) net	19	syz			12	3245d	3253d	3/29	3231d	509c7a1ecc86 packet: avoid panic in packet_getsockopt()
KASAN: use-after-free Read in ip_queue_xmit net	19				1	3256d	3256d	3/29	3231d	c92e8c02fe66 net-backports: tcp/dccp: fix ireq->opt races
WARNING in refcount_dec net	-1				9	3232d	3255d	3/29	3231d	e669b8694547 ipv6: addrconf: increment ifp refcount before ipv6_del_addr()
INFO: rcu detected stall (2) net	-1	syz, C			56	3231d	3243d	3/29	3231d	93161922c658 net-backports: tun/tap: sanitize TUNSETSNDBUF input
WARNING in kmalloc_slab net	-1	syz, C			22353	3249d	3321d	3/29	3249d	81fbfe8adaf3 ptr_ring: use kmalloc_array()