Applied filters: WithRepro (drop) Label=subsystems:net (drop)

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
WARNING: suspicious RCU usage in xfrm_nlmsg_multicast prio:normal net	4	syz, C	error		163	39d	84d	26/29	never	42d100f5232f xfrm: add missing RCU read lock in xfrm_send_migrate_state()
KCSAN: data-race in kick_pool_pick / wq_worker_running race:benign prio:low usb net	6	C			93	20h56m	63d	17/29	never	workqueue: mark pool->nr_running as __data_racy
INFO: task hung in inet_rtm_newaddr prio:normal net	1	syz, C	done		302	6h32m	666d	26/29	never	f4e72e375807 wifi: cfg80211: reduce RTNL holding in regulatory enforcement
INFO: task hung in inet6_rtm_newaddr (2) prio:high net	1	syz, C	error	inconclusive	49	1d21h	534d	26/29	never	f4e72e375807 wifi: cfg80211: reduce RTNL holding in regulatory enforcement
memory leak in __vsock_create (2) prio:high net virt	3	syz, C			6	67d	182d	27/29	never	b8c899cf5e7b vsock: don't check the listener's sk_err in vsock_accept()
WARNING in virtio_transport_send_pkt_info (2) prio:high virt kvm net	-1	syz, C	error		4	85d	329d	27/29	never	5ab3b28c5b3b vsock/virtio: restore msg_iter on transmission failure
BUG: using smp_processor_id() in preemptible code in tx_complete prio:high net usb	4	C			3	52d	83d	10/29	never	usbnet: fix smp_processor_id() use in preemptible context
UBSAN: shift-out-of-bounds in vcc_connect prio:high usb net	-1	syz			4	61d	60d	27/29	never	a60fd8c6dbaa usb: atm: usbatm: fix invalid ci_range initialization
KASAN: vmalloc-out-of-bounds Read in rpc_queue_upcall prio:high net nfs	17	C			9	31d	45d	2/29	never	NFSD: Move the cld upcall message out of the caller's stack frame
KASAN: slab-out-of-bounds Read in __dynamic_pr_debug prio:high nfc net	17	syz, C			453	7d16h	65d	26/29	never	7dcf371a3563 nfc: llcp: fix slab-out-of-bounds reads when logging service names
KASAN: use-after-free Read in qdisc_pkt_len_segs_init prio:high net	19	syz, C	error		151	50d	192d	27/29	never	28a57fb2c5df net: iptunnel: fix stale transport header during tunnel decapsulation
WARNING in trace_event_raw_event_icmp_send prio:low net	-1	C			3	55d	59d	27/29	never	7fcc2fe39fed net: icmp: avoid invalid transport header access in icmp_send tracepoint
WARNING in netdev_queue_get_dma_dev prio:low net	-1	syz, C			294	61d	79d	28/29	never	92465f46f3c3 net: expect instance lock in netdev_queue_get_dma_dev()
BUG: stack guard page was hit in nfsctl_transaction_write prio:low net nfs	-1	syz, C			2	40d	68d	2/29	never	SUNRPC: Reject a socket that already has an svc_sock attached
WARNING in tcf_ct_flow_table_process_conn prio:high net	-1	syz, C	error		16	22d	40d	26/29	never	47abe7a5c4eb net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure
WARNING in vmap_pages_range_noflush (2) bpf net	-1	syz, C	error		250	1522d	1524d	1/29	never	mm/gup.c: Fix return value for __gup_longterm_locked()
kernel BUG in sock_sendmsg_nosec prio:normal net	-1	syz, C			2	53d	53d	27/29	never	73e594c19b4f af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
WARNING in __dev_queue_xmit (6) prio:low net	-1	syz, C	error		58	2d21h	73d	28/29	never	6bcd76c134c5 af_packet: Don't send zero-byte data in tpacket_snd().
WARNING in rtmsg_ifinfo_build_skb prio:low net	-1	syz, C			150	26d	69d	26/29	never	c2de369c5c5b macsec: initialize SecY before registering the netdevice
WARNING: locking bug in tcp_tsq_handler prio:low net	4	syz			65	26d	59d	27/29	never	02c6be7d675b locking/lockdep: Invalidate stale class_cache entries for zapped classes
memory leak in l2tp_tunnel_create (2) prio:high net	3	syz, C			1	78d	76d	28/29	never	9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
memory leak in inet_create (3) prio:high net	3	syz, C			1	75d	75d	28/29	never	9006c116dd11 l2tp: fix tunnel and session refcount leak on seq_file release
possible deadlock in ipvlan_uninit prio:normal net	4	syz, C	error		7402	28d	103d	27/29	never	a8455260b2e9 ipvlan: unregister upper devices outside pnodes_lock
WARNING in __skb_flow_dissect (8) net prio:low	-1	syz, C			5	26d	24d	26/29	never	8ec454dcd00c ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit prio:high net	19	syz, C	error	error	33	294d	702d	0/29	never	ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
KMSAN: uninit-value in erspan_build_header (2) net	7	syz, C			346	138d	944d	1/29	never	bpf: Don't redirect too small packets
BUG: using smp_processor_id() in preemptible code in sk_skb_reason_drop prio:low net	4	syz, C	error		307	35d	42d	26/29	never	c19b7d35086b drop_monitor: use raw_cpu_ptr() in tracepoint probes
memory leak in udp_tunnel_nic_netdevice_event prio:high net	3	syz, C			6	91d	91d	29/29	39d	080695e6f005 net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
KASAN: slab-out-of-bounds Read in copy_from_sockptr prio:high net	17	syz			25	73d	79d	29/29	39d	d0c80dbb9704 net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
KMSAN: uninit-value in macvlan_broadcast (2) prio:low net	7	syz, C			9	132d	207d	29/29	56d	12bec2bd4b76 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
memory leak in vlan_vid_add prio:normal net	3	syz, C			1	94d	108d	29/29	66d	dcf15eaf5641 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
INFO: task hung in genl_rcv_msg (4) net	1	syz, C	done		880	67d	750d	29/29	66d	22f8aa35964e tipc: fix infinite loop in __tipc_nl_compat_dumpit
WARNING in rcu_note_context_switch (5) prio:low net	-1	syz, C	error		10	102d	300d	29/29	66d	313a123e1fca ipv6: Change allocation flags to match rcu_read_lock section requirements
WARNING in ip_rt_bug (3) prio:high net	-1	syz, C	error		54	145d	156d	29/29	100d	7eb72c1e3984 ipv4: icmp: reject broadcast/multicast routes
possible deadlock in __sk_receive_skb prio:high net	4	syz, C	error		80	154d	156d	29/29	100d	dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu prio:high net nfs	17	syz, C			67	149d	184d	29/29	100d	ea25e3c7915b sunrpc: prevent out-of-bounds read in __cache_seq_start()
KASAN: slab-use-after-free Read in sk_msg_recvmsg prio:normal bpf net	19	syz, C	error	error	3	254d	249d	29/29	100d	c010995b29c8 sockmap: Fix use-after-free in udp_bpf_recvmsg()
inconsistent lock state in __sk_receive_skb prio:high net	4	syz, C	error		147	142d	231d	29/29	100d	dbc81608e3a6 phonet/pep: disable BH around forwarded sk_receive_skb()
BUG: corrupted list in dev_deactivate_many (2) prio:high net	8	syz			8	135d	136d	29/29	100d	8eed5519e496 net: watchdog: fix refcount tracking races net: watchdog: fix refcount tracking races
memory leak in xfrm_policy_construct prio:normal net	3	syz, C			8	197d	197d	29/29	146d	xfrm: fix refcount leak in xfrm_migrate_policy_find
kernel BUG in pn_socket_sendmsg net	-1	syz, C			19	176d	184d	29/29	154d	5b0c911bcdbd net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
WARNING in sock_map_destroy (3) bpf net	-1	syz, C	done	error	5	183d	203d	29/29	154d	6451d58a3556 sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}().
general protection fault in bq_flush_to_queue (2) net bpf	2	syz, C	error	error	6	237d	319d	29/29	154d	869c63d5975d bpf: Fix race in cpumap on PREEMPT_RT 7ef83bf1712b net: move promiscuity handling into netdev_rx_mode_work
kernel BUG in pfkey_send_migrate net	-1	syz, C	error		3	215d	222d	29/29	155d	eb2d16a7d599 af_key: validate families in pfkey_send_migrate()
general protection fault in bond_header_create net	2	syz			10	213d	223d	29/29	155d	425000dbf173 team: fix header_ops type confusion with non-Ethernet ports
WARNING in u32_change (2) net	-1	syz, C	error		760	191d	233d	29/29	155d	34bd3c6b0bd3 net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode()
KASAN: slab-use-after-free Read in sock_def_readable (2) net	19	syz, C			123	187d	228d	29/29	155d	922814879542 atm: lec: fix use-after-free in sock_def_readable()
KASAN: global-out-of-bounds Read in ip6gre_header net	17	syz, C	error		3	201d	204d	29/29	155d	b120e4432f9f net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
memory leak in radix_tree_insert (2) arm-msm net	3	syz, C			1	269d	1050d	29/29	155d	2428083101f6 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
BUG: sleeping function called from invalid context in vhost_get_avail_idx kvm net virt	5	syz, C			1	187d	185d	29/29	155d	e08a9fac5cf8 vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
KMSAN: uninit-value in netif_skb_features (4) net	7	syz, C			116	204d	381d	29/29	155d	ddc748a391dd net: use skb_header_pointer() for TCPv4 GSO frag_off check
unregister_netdevice: waiting for DEV to become free (8) net	2	syz, C	done		443850	169d	1231d	29/29	169d	9af0feae8016 RDMA/core: Fix stale RoCE GIDs during netdev events at registration fa3c411d21eb RDMA/core: always drop device refcount in ib_del_sub_device_and_put() f12b69d8f228 batman-adv: Release references to inactive interfaces ec69daabe452 bpf: Fix reference count leak in bpf_prog_test_run_xdp() 7fcbe5b2c6a4 can: j1939: implement NETDEV_UNREGISTER notification handler 5d5602236f5d can: j1939: make j1939_session_activate() fail if device is no longer registered ac782f4e3bfc ipv4: Fix reference count leak when using error routes with nexthop objects 1809c82aa073 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts bb4c698633c0 team: avoid NETDEV_CHANGEMTU event when unregistering slave 4efa91a28576 xfrm: always flush state and policy upon NETDEV_UNREGISTER event
BUG: unable to handle kernel paging request in ip_route_output_key_hash_rcu net	17	syz, C			910	232d	251d	29/29	169d	21ec92774d15 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
general protection fault in sigd_send net	11	syz, C	error		10	260d	357d	29/29	169d	ae88a5d2f29b net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
memory leak in napi_skb_cache_get (2) net virt	3	syz, C			1	283d	280d	29/29	169d	21e4271e6509 Bluetooth: purge error queues in socket destructors
memory leak in l2tp_tunnel_create net	3	syz, C			9	278d	282d	29/29	169d	4d10edfd1475 l2tp: Fix memleak in l2tp_udp_encap_recv().
general protection fault in ife_tlv_meta_encode net	2	syz, C	error		6	274d	274d	29/29	169d	27880b0b0d35 net/sched: act_ife: avoid possible NULL deref
KASAN: slab-out-of-bounds Read in fib6_add_rt2node net	17	syz, C			38	245d	253d	29/29	169d	8244f959e2c1 ipv6: Fix out-of-bound access in fib6_add_rt2node().
kernel BUG in fib6_add_rt2node (2) net	-1	syz, C	error		18	269d	289d	29/29	169d	bbf4a17ad9ff ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
kernel BUG in ipgre_header (4) net	-1	syz, C			9	279d	287d	29/29	169d	e67c577d8989 ipv4: ip_gre: make ipgre_header() robust
KMSAN: uninit-value in __inet_bind net	7	syz, C			410	245d	251d	29/29	169d	7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
WARNING in skb_attempt_defer_free net	-1	syz, C			16	266d	291d	29/29	169d	e5c8eda39a9f udp: call skb_orphan() before skb_attempt_defer_free()
memory leak in __build_skb (4) net	3	syz, C			1	286d	283d	29/29	169d	9a56796ad258 gue: Fix skb memleak with inner IP protocol 0.
KASAN: use-after-free Read in __linkwatch_run_queue net	19	syz			108	261d	526d	29/29	169d	83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
KMSAN: uninit-value in __inet6_bind (2) net	7	syz, C			78	246d	252d	29/29	169d	7b821da55b3f rds: tcp: fix uninit-value in __inet_bind
BUG: sleeping function called from invalid context in __bpf_stream_push_str net virt	5	syz, C	done		88	276d	319d	29/29	169d	99a3e3a1cfc9 slab: fix kmalloc_nolock() context check for PREEMPT_RT
WARNING in ip_rt_bug (2) net	-1	syz, C	done	error	612	169d	1471d	29/29	169d	81b84de32bb2 xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
possible deadlock in sch_direct_xmit (5) net	4	syz, C	unreliable		1245	170d	289d	29/29	169d	872ac785e768 ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
general protection fault in lec_arp_clear_vccs net	19	syz, C	error		84	197d	401d	29/29	169d	101bacb303e8 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
KASAN: slab-use-after-free Read in handle_tx (2) net	19	syz, C			1086	253d	975d	29/29	169d	308e7e4d0a84 serial: caif: fix use-after-free in caif_serial ldisc_close()
KMSAN: uninit-value in IP6_ECN_decapsulate (3) net	7	syz, C			4	288d	288d	29/29	169d	81c734dae203 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
possible deadlock in inet6_getname net	4	syz, C	error		122	238d	251d	29/29	169d	021fd0f87004 net/rds: fix recursive lock in rds_tcp_conn_slots_available
WARNING in kcm_write_msgs net	-1	syz, C	done		622	251d	2409d	29/29	169d	ca220141fa8e kcm: fix zero-frag skb in frag_list on partial sendmsg error
memory leak in llcp_sock_create net nfc	3	syz, C			6	288d	271d	29/29	169d	165c34fb6068 nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
BUG: corrupted list in dev_deactivate_many net	19	syz, C			22	177d	416d	29/29	169d	83b67cc9be92 linkwatch: use __dev_put() in callers to prevent UAF
WARNING in mdiobus_get_phy net usb	-1	syz			2	301d	311d	29/29	270d	a1e077a3f76e net: usb: asix: validate PHY address before use
WARNING in nfc_dev_down net nfc	-1	syz, C	error		12	297d	311d	29/29	270d	1ab526d97a57 net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
memory leak in rtl8150_set_multicast net usb	3	syz			1	315d	311d	29/29	270d	12cab1191d98 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
kernel BUG in ip6_pol_route (2) net	-1	syz, C	error		1134	296d	341d	29/29	270d	1adaea51c61b ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
kernel BUG in ip6gre_header (6) net	-1	syz, C			127	298d	315d	29/29	270d	db5b4e39c4e6 ip6_gre: make ip6gre_header() robust
possible deadlock in ipv6_sock_mc_close (4) net	4	syz, C	done		7	321d	318d	29/29	275d	b98f06f9a5d3 sctp: Fetch inet6_sk() after setting ->pinet6 in sctp_clone_sock().
KASAN: invalid-free in inet_sock_destruct net	24	syz, C	inconclusive		10	308d	318d	29/29	275d	d7ff61e6f3ef sctp: Clear inet_opt in sctp_v6_copy_ip_options().
WARNING in em_nbyte_match net	-1	syz, C	done		7	321d	335d	29/29	288d	4fe5a00ec707 net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
divide error in __tcp_select_window (4) net	2	syz, C	done		14	329d	331d	29/29	288d	f07f4ea53e22 mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
WARNING in xfrm_state_fini (4) net	-1	syz, C	done		89278	323d	375d	29/29	288d	10deb6986484 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
kernel BUG in ipgre_header (3) net	-1	syz, C			99	289d	367d	29/29	288d	0ae9cfc454ea team: Move team device type change at the end of team_port_add
KMSAN: uninit-value in em_canid_match can net	7	syz, C			7	330d	331d	29/29	288d	0c922106d7a5 net/sched: em_canid: fix uninit-value in em_canid_match
KMSAN: kernel-infoleak in __skb_datagram_iter (4) net	18	syz, C			1050	289d	881d	29/29	288d	62b656e43eae net: sched: act_connmark: initialize struct tc_ife to fix kernel leak ce50039be49e net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
BUG: sleeping function called from invalid context in sock_map_delete_elem net bpf	5	syz, C	error		58	369d	421d	29/29	339d	7c33e97a6ef5 bpf: Do not disable preemption in bpf_test_run().
possible deadlock in vsock_linger virt net	4	syz, C			7	368d	367d	29/29	339d	f7c877e75352 vsock: fix lock inversion in vsock_assign_transport()
BUG: sleeping function called from invalid context in __set_page_owner net virt	5	syz, C	done		79	365d	378d	29/29	339d	c83aab85e181 mm: don't spin in add_stack_record when gfp flags don't allow
WARNING in rtl8150_start_xmit/usb_submit_urb net usb	-1	syz, C			5	399d	419d	29/29	358d	958baf5eaee3 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
WARNING in ah6_output net	-1	syz, C	error		8	396d	516d	29/29	358d	2327a3d6f65c net: ipv6: fix field-spanning memcpy warning in AH output
WARNING in max_vclocks_store mm net	-1	syz, C			3	419d	654d	29/29	358d	e9f35294e18d ptp: Add a upper bound on max_vclocks
KMSAN: uninit-value in nci_dev_up (2) nfc net	7	syz, C			34	385d	441d	29/29	358d	9c328f54741b net: nfc: nci: Add parameter validation for packet data
WARNING in __linkwatch_sync_dev (2) net	-1	syz, C	done		952	371d	498d	29/29	358d	23a6037ce76c bonding: Remove support for use_carrier
KASAN: slab-use-after-free Write in __xfrm_state_delete net	22	syz, C	done		4863	368d	451d	29/29	358d	cd8ae32e4e46 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
possible deadlock in inet_shutdown net	4	syz, C	done		11	404d	412d	29/29	358d	9f7c02e03157 nbd: restrict sockets to TCP and UDP
WARNING in inet_sock_destruct (5) net	-1	syz, C	error		8	371d	408d	29/29	358d	a3967baad4d5 tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
KASAN: slab-use-after-free Read in napi_gro_frags (2) net	19	syz, C	done		3	409d	401d	29/29	358d	1091860a16a8 net: tun: Update napi->skb after XDP process
general protection fault in find_match (6) net	17	syz, C			102	395d	401d	29/29	358d	390b3a300d78 nexthop: Forbid FDB status change while nexthop is in a group
WARNING in est_timer net	-1	syz, C	error		497	413d	422d	29/29	358d	9f74c0ea9b26 net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
KMSAN: uninit-value in lan78xx_reset net usb	7	syz, C			14	379d	413d	29/29	358d	49bdb63ff644 net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
possible deadlock in __netdev_update_features net	4	syz, C	done		227	360d	508d	29/29	358d	0f82c3ba66c6 macsec: sync features on RTM_NEWLINK
WARNING in xfrm_state_fini (3) net	-1	syz, C	done		122008	379d	451d	29/29	379d	42e42562c9cf xfrm: flush all states in xfrm_state_fini
WARNING: ODEBUG bug in __sk_destruct (3) net	-1	syz, C	error		12	425d	441d	29/29	379d	52565a935213 net: kcm: Fix race condition in kcm_unattach()
BUG: unable to handle kernel paging request in nsim_queue_free net	8	syz			49	415d	448d	29/29	379d	b2cafefaf047 netdevsim: Fix wild pointer access in nsim_queue_free().
KMSAN: uninit-value in hsr_get_node (3) net	7	syz, C			30	428d	918d	29/29	379d	7af76e9d18a9 net, hsr: reject HSR frame if skb can't hold tag
WARNING in virtio_transport_send_pkt_info net virt kvm	-1	syz, C			145	419d	437d	29/29	379d	7fb1291257ea vsock/virtio: Fix message iterator handling on transmit path
WARNING: suspicious RCU usage in corrupted (3) net	4	syz, C	done	done	1	453d	515d	29/29	400d	7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
WARNING in ip6_mr_output net	-1	syz, C	done		143	478d	483d	29/29	413d	af232e7615e4 ipv6: guard ip6_mr_output() with rcu
WARNING in ipv6_gso_segment net	-1	syz, C			8	449d	449d	29/29	413d	d45cf1e7d718 ipv6: reject malicious packets in ipv6_gso_segment()
possible deadlock in team_del_slave (3) net	4	syz, C	error		386707	425d	910d	29/29	413d	bfb4fb77f9a8 team: replace team lock with rtnl lock
general protection fault in clip_push ext4 net	8	syz, C			5	482d	489d	29/29	413d	b993ea46b3b6 atm: clip: prevent NULL deref in clip_push()
general protection fault in qfq_qlen_notify net	2	syz, C			18	469d	476d	29/29	413d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
general protection fault in drr_qlen_notify net	10	syz, C	done		101	467d	476d	29/29	413d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
general protection fault in qdisc_tree_reduce_backlog net	8	syz, C	done		255	463d	476d	29/29	413d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
general protection fault in hfsc_qlen_notify net	10	syz, C			161	463d	477d	29/29	413d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KMSAN: uninit-value in pptp_xmit (3) net	7	syz, C			49	443d	451d	29/29	413d	de9c4861fb42 pptp: ensure minimal skb length in pptp_xmit()
general protection fault in htb_qlen_notify net	10	syz, C	done		166	467d	477d	29/29	413d	ffdde7bf5a43 net/sched: Abort __tc_modify_qdisc if parent class does not exist
KASAN: slab-out-of-bounds Read in pause_parse_request net	17	syz, C	done		217	478d	483d	29/29	413d	99e3eb454cc4 net: ethtool: avoid OOB accesses in PAUSE_SET
WARNING in kvfree_call_rcu net lsm	-1	syz, C			2	472d	471d	29/29	413d	60ada4fe644e smc: Fix various oops due to inet_sock type confusion.
possible deadlock in rpc_close_pipes net nfs	4	syz, C			904	476d	477d	29/29	413d	2a8061ee5e41 better lockdep annotations for simple_recursive_removal()
WARNING: suspicious RCU usage in task_cls_state net	4	syz, C	done		175	427d	515d	29/29	413d	7f12c3385048 net, bpf: Fix RCU usage in task_cls_state() for BPF programs
WARNING in remove_proc_entry (8) net nfs	-1	syz			76	447d	497d	29/29	413d	e8d6f3ab5946 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
possible deadlock in team_device_event (3) net	4	syz, C	error		38569	425d	896d	29/29	413d	bfb4fb77f9a8 team: replace team lock with rtnl lock
KASAN: slab-use-after-free Read in tcp_prune_ofo_queue net	19	syz, C	done		356	463d	464d	29/29	413d	7eeabfb23738 tcp: fix UaF in tcp_prune_ofo_queue()
WARNING in inet_sock_destruct (4) net	-1	syz, C	done		6683	415d	1217d	29/29	413d	d3a5f2871adc tcp: Correct signedness in skb remaining space calculation
WARNING: proc registration bug in atm_dev_register net	-1	syz, C	error		5	484d	491d	29/29	413d	a433791aeaea atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
KASAN: null-ptr-deref Write in rcuref_put (4) net	12	syz, C	done		7	443d	561d	29/29	413d	ae633388cae3 pptp: fix pptp_xmit() error path
possible deadlock in rtnl_newlink net	4	syz, C			11	498d	512d	29/29	442d	b4a8085ceefb e1000: Move cancel_work_sync to avoid deadlock
KASAN: slab-use-after-free Read in lane_ioctl net	19	syz			7	490d	491d	29/29	442d	d13a3824bfd2 net: atm: add lec_mutex
BUG: sleeping function called from invalid context in team_change_rx_flags net	5	syz, C	done		71	473d	520d	29/29	472d	d8d85ef0a631 af_packet: move notifier's packet_dev_mc out of rcu critical section
general protection fault in dev_set_group net	2	syz, C	error		3	506d	506d	29/29	472d	feafc73f3e6a net: prevent a NULL deref in rtnl_create_link()
BUG: sleeping function called from invalid context in pcpu_alloc_noprof net	5	syz, C	done		4	523d	537d	29/29	472d	8e5f1bb81274 ipv6: Narrow down RCU critical section in inet6_rtm_newroute().
WARNING in ipv6_addr_prefix net	-1	syz, C	error		3056	490d	540d	29/29	472d	586ceac9acb7 ipv6: Restore fib6_config validation for SIOCADDRT.
WARNING in udp_tunnel_update_gro_rcv net	-1	syz, C	error		108	554d	583d	29/29	472d	c26c192c3d48 udp: properly deal with xfrm encap and ADDRFORM
WARNING in nla_get_range_unsigned (3) net	-1	syz, C	done		22	528d	533d	29/29	472d	a96876057b9e netlink: fix policy dump for int with validation callback
WARNING in tls_strp_msg_load net	-1	syz, C	done		4	581d	573d	28/29	499d	5071a1e606b3 net: tls: explicitly disallow disconnect
kernel BUG in qlist_free_all net fs	-1	syz, C	done	done	12	552d	699d	28/29	499d	3a04334d6282 bcachefs: Fix b->written overflow
WARNING in __linkwatch_sync_dev net	-1	syz, C	done		1038	499d	563d	28/29	499d	10a77965760c batman-adv: Fix double-hold of meshif when getting enabled f7a11cba0ed7 bonding: hold ops lock around get_link
WARNING in cleanup_net (4) net	-1	syz, C	error		309	590d	609d	28/29	499d	5c70eb5c593d net: better track kernel sockets lifetime
WARNING in net_free (4) net	-1	syz			4	626d	697d	28/29	499d	5c70eb5c593d net: better track kernel sockets lifetime
general protection fault in ethnl_default_dumpit net	2	syz, C	error		321	594d	595d	28/29	499d	f36a9285828c net: ethtool: use correct device pointer in ethnl_default_dump_one()
WARNING: bad unlock balance in do_setlink net	4	syz, C	done		401	557d	564d	28/29	499d	445e99bdf68d rtnetlink: Fix bad unlock balance in do_setlink().
general protection fault in rtnl_create_link net	8	syz, C	done		49	547d	557d	28/29	499d	4798cfa2097f net: don't try to ops lock uninitialized devs
general protection fault in kernel_sock_shutdown (3) net	2	syz			5	572d	571d	28/29	499d	10206302af85 sctp: add mutual exclusion in proc_sctp_do_udp_port()
possible deadlock in gtp_encap_enable_socket net	4	syz, C	error	done	24	559d	759d	28/29	499d	752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
general protection fault in vxlan_vnigroup_uninit net	2	syz, C			9	617d	620d	28/29	499d	5805402dcc56 vxlan: check vxlan_vnigroup_init() return value
general protection fault in add_wait_queue kvm net virt	10	syz, C	done		676	613d	627d	28/29	499d	78dafe1cf3af vsock: Orphan socket after transport release
kernel BUG in skbprio_enqueue net	-1	syz, C			7	575d	575d	28/29	499d	ce8fe975fd99 net_sched: skbprio: Remove overly strict queue assertions
KMSAN: uninit-value in __ipv6_addr_type net	7	syz, C			3	609d	609d	28/29	499d	27843ce6ba3d ipvlan: ensure network headers are in skb linear part
possible deadlock in ipv6_sock_ac_close (4) net	4	syz, C	error		5	566d	603d	28/29	499d	752e2217d789 smc: Fix lockdep false-positive for IPPROTO_SMC.
WARNING: bad unlock balance in __rtnl_unlock net	4	syz, C	done		18	596d	597d	28/29	499d	f130a0cc1b4f inet: fix lwtunnel_valid_encap_type() lock imbalance
WARNING: lock held when returning to user space in rtnl_link_ops_get net	4	syz, C	done		9	697d	704d	28/29	533d	9b234a97b10c rtnetlink: fix rtnl_dump_ifinfo() error path
WARNING: lock held when returning to user space in nsim_pp_hold_write net	4	syz, C			4	672d	677d	28/29	533d	b9b8301d369b net: netdevsim: fix nsim_pp_hold_write()
general protection fault in vsock_stream_has_data net virt	2	syz, C	done	done	6	650d	646d	28/29	534d	df137da9d6d1 vsock/virtio: cancel close work in the destructor
WARNING in nsim_udp_tunnel_set_port net	-1	syz, C			15	631d	645d	28/29	534d	50bf398e1cea net: netdevsim: try to close UDP port harness races
BUG: unable to handle kernel paging request in try_to_wake_up (2) net	19	syz, C	error		31	610d	696d	28/29	534d	f10bef73fb35 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
general protection fault in put_page (4) net	2	syz, C	done		170	657d	674d	28/29	534d	cbb26f7d8451 mptcp: fix TCP options overflow.
WARNING in nsim_dev_health_break_write net	-1	syz, C			10	673d	678d	28/29	534d	ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
WARNING in netlink_ack_tlv_fill net	-1	syz, C	error		3	713d	709d	28/29	534d	3bf39fa849ab netlink: fix false positive warning in extack during dumps
KMSAN: uninit-value in nsim_get_ringparam net	7	syz, C			59	629d	637d	28/29	534d	6db9d3a536cd netdevsim: don't assume core pre-populates HDS params on GET
general protection fault in modify_prefix_route net	2	syz, C	done		11	695d	695d	28/29	534d	a747e02430df ipv6: avoid possible NULL deref in modify_prefix_route()
WARNING in __dev_queue_xmit (5) net	-1	syz, C			41	676d	674d	28/29	534d	5eb70dbebf32 netdev-genl: avoid empty messages in queue dump
WARNING in free_netdev (2) net	-1	syz			259	538d	643d	28/29	534d	bff406bc0424 net: destroy dev->lock later in free_netdev()
KMSAN: uninit-value in hsr_forward_skb (2) net	7	syz, C			22	688d	695d	28/29	534d	b9653d19e556 net: hsr: avoid potential out-of-bound access in fill_frame_info()
UBSAN: array-index-out-of-bounds in mr_table_dump net	15	syz, C			4	639d	639d	28/29	534d	15a901361ec3 ipmr: do not call mr_mfc_uses_dev() for unres entries
WARNING: suspicious RCU usage in __ethtool_get_ts_info net	4	syz, C	done		41	654d	675d	28/29	534d	4c61d809cf60 net: ethtool: Fix suspicious rcu_dereference usage
UBSAN: shift-out-of-bounds in flow_classify net	-1	syz, C	error		5	659d	658d	28/29	534d	a039e54397c6 net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
WARNING in rxrpc_send_data afs net	-1	syz, C	done		275	675d	682d	28/29	534d	ae4f89989479 rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
WARNING in l2tp_exit_net net	-1	syz	done		219	685d	770d	28/29	534d	5d066766c5f1 net/l2tp: fix warning in l2tp_exit_net found by syzbot
possible deadlock in team_port_change_check (2) net	4	syz, C	done		16406	545d	966d	28/29	534d	3fff5da4ca21 team: prevent adding a device which is already a team device lower
KASAN: slab-use-after-free Read in ila_nf_input net	19	syz			38	658d	661d	28/29	534d	260466b576bc ila: serialize calls to nf_register_net_hooks()
kernel BUG in vlan_get_tci net	-1	syz, C	done		5	661d	661d	28/29	534d	77ee7a6d16b6 af_packet: fix vlan_get_tci() vs MSG_PEEK
WARNING in ip6mr_free_table net	-1	syz, C	done		97859	683d	689d	28/29	534d	50b94204446e ipmr: tune the ipmr_can_free_table() checks.
KASAN: slab-out-of-bounds Read in nsim_dev_health_break_write net	17	syz, C			4	672d	678d	28/29	534d	ee76746387f6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
WARNING in page_pool_put_unrefed_netmem net	-1	syz, C	error		7	647d	788d	28/29	534d	a126061c80d5 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
general protection fault in vsock_connectible_has_data net virt	2	syz, C	done		7	653d	652d	28/29	534d	f6abafcd32f9 vsock/bpf: return early if transport is not assigned
kernel BUG in vlan_get_protocol_dgram net	-1	syz, C	done		8	661d	661d	28/29	534d	f91a5b808938 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
WARNING in skb_checksum_help (3) net	-1	syz, C	done	done	9460	709d	1036d	28/29	633d	89add40066f9 net: drop bad gso csum_start and offset in virtio_net_hdr
divide error in __tcp_select_window (3) net	2	syz, C			5	714d	720d	28/29	675d	ce7356ae3594 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
WARNING: suspicious RCU usage in phonet_route_del net	4	syz, C	done		7	716d	720d	28/29	675d	38a1f50a5efb phonet: do not call synchronize_rcu() from phonet_route_del()
general protection fault in put_page (3) net	2	syz, C	done		47	676d	720d	28/29	676d	341468e0ab4b lib/iov_iter: fix bvec iterator setup
WARNING in sk_skb_reason_drop net	-1	syz, C	done		1447	677d	705d	28/29	676d	85c7975acd97 net: ip: fix unexpected return in fib_validate_source()
WARNING in __sock_create net	-1	syz, C	done		4	715d	715d	28/29	680d	d293958a8595 net/smc: do not leave a dangling sk pointer in __smc_create()
BUG: Bad page state in bpf_test_run_xdp_live net	-1	syz, C	done		17	722d	725d	28/29	708d	c40dd8c47325 bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
general protection fault in dev_map_enqueue (2) bpf net	19	syz, C	error	done	336	813d	879d	28/29	709d	09d88791c7cd bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
UBSAN: shift-out-of-bounds in xfrm_selector_match (2) net	-1	syz, C	error		10	753d	766d	28/29	709d	3f0ab59e6537 xfrm: validate new SA's prefixlen using SA family when sel.family is unset
KASAN: slab-use-after-free Read in advance_sched net	19	syz, C	error		15	753d	1039d	28/29	709d	f504465970ae net: sched: fix use-after-free in taprio_change()
general protection fault in ethnl_phy_doit net	2	syz, C	done		6	772d	772d	28/29	727d	fce1e9f86af1 net: ethtool: phy: Check the req_info.pdn field for GET commands
WARNING: refcount bug in ethnl_phy_done net	13	syz, C	done		4	772d	772d	28/29	731d	1ad84a151af7 net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP
kernel BUG in __sock_sendmsg net	-1	syz, C			111	780d	797d	28/29	731d	fe1910f9337b tcp_bpf: fix return value of tcp_bpf_sendmsg()
WARNING in __dev_queue_xmit (4) net	-1	syz, C			387	732d	778d	28/29	731d	9d301de12da6 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
WARNING in hsr_fill_frame_info net	-1	syz, C	error		80	755d	784d	28/29	731d	430d67bdcb04 net: hsr: Use the seqnr lock for frames received via interlink port.
WARNING in sock_map_close (2) bpf net	-1	syz, C	done		3	792d	791d	28/29	731d	1461f5a3d810 l2tp: avoid overriding sk->sk_user_data
KASAN: slab-use-after-free Read in unix_stream_read_actor (2) net	19	syz, C	inconclusive		4	783d	778d	28/29	731d	5aa57d9f2d53 af_unix: Don't return OOB skb in manage_oob().
WARNING: lock held when returning to user space in ethnl_act_cable_test net	4	syz, C	done		43	786d	788d	28/29	731d	3d6a0c4f4552 net: fix unreleased lock in cable test
BUG: unable to handle kernel paging request in bpf_prog_ADDR (3) bpf net	8	syz, C	done		6	832d	831d	28/29	731d	92de36080c93 bpf: Fail verification for sign-extension of packet data/data_end/data_meta
WARNING in ethnl_req_get_phydev net	-1	syz, C	done		73	786d	788d	28/29	731d	cff69f72d333 ethtool: pse-pd: move pse validation into set
INFO: rcu detected stall in neigh_timer_handler (8) net	1	syz, C	done	done	72	803d	862d	28/29	731d	22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
general protection fault in reuseport_add_sock (3) net	2	syz, C	done		3	816d	815d	28/29	749d	9ab0faa7f9ff sctp: Fix null-ptr-deref in reuseport_add_sock().
BUG: stack guard page was hit in vsock_bpf_recvmsg net virt	-1	syz, C	done		6	804d	804d	28/29	749d	69139d2919dd vsock: fix recursive ->recvmsg calls
KASAN: slab-use-after-free Read in kcm_release net	19	syz, C			2	858d	898d	28/29	749d	807067bf014d kcm: Serialise kcm_sendmsg() for the same socket.
WARNING in skb_warn_bad_offload (5) net	-1	syz, C	done		18	796d	829d	28/29	749d	30b03f2a0592 udp: Fall back to software USO if IPv6 extension headers are present
WARNING: refcount bug in sk_common_release net	13	syz, C			9	812d	828d	27/29	787d	2fe5273f149c net/smc: prevent UAF in inet_create()
WARNING: refcount bug in inet_create net	13	syz, C	done		10	814d	841d	27/29	787d	2fe5273f149c net/smc: prevent UAF in inet_create()
KASAN: stack-out-of-bounds Read in xdp_do_check_flushed bpf net	17	syz, C	done		127	812d	832d	27/29	791d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __dev_flush net bpf	19	syz, C			35	812d	826d	27/29	791d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
KMSAN: uninit-value in tcf_ct_flow_table_get net	7	syz, C			603	812d	820d	27/29	791d	2191a54f6322 sched: act_ct: take care of padding in struct zones_ht_key
KASAN: slab-use-after-free Read in bq_xmit_all bpf net	19	syz, C	done		29	812d	826d	27/29	791d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __xsk_map_flush net bpf	19	syz, C	done		26	812d	829d	27/29	791d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
general protection fault in __cpu_map_flush bpf net	10	syz, C	inconclusive		25	812d	826d	27/29	791d	9da49aa80d68 tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
divide error in tcp_rcv_space_adjust (3) net	2	syz, C	done		3	904d	906d	27/29	799d	94062790aedb UPSTREAM: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
general protection fault in dev_map_redirect bpf net	2	syz, C			362	836d	843d	27/29	800d	fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in dev_hash_map_redirect bpf net	2	syz, C	done		29	836d	843d	27/29	800d	fecef4cd42c6 tun: Assign missing bpf_net_context.
WARNING in __ip6_make_skb (2) net	-1	syz, C	done		104	864d	879d	27/29	800d	73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
KASAN: slab-use-after-free Read in l2tp_tunnel_del_work net	19	syz, C	done		99	836d	850d	27/29	800d	f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
stack segment fault in bpf_xdp_redirect bpf net	2	syz, C			181	836d	843d	27/29	800d	fecef4cd42c6 tun: Assign missing bpf_net_context.
stack segment fault in cpu_map_redirect bpf net	2	syz, C	done		11	836d	835d	27/29	800d	fecef4cd42c6 tun: Assign missing bpf_net_context.
KASAN: slab-use-after-free Write in l2tp_session_delete net	22	syz, C	done		1286	830d	849d	27/29	800d	f8ad00f3fb2a l2tp: fix possible UAF when cleaning up tunnels
KMSAN: uninit-value in vsock_assign_transport (2) net virt	7	syz, C			14	861d	917d	27/29	800d	1e1fdcbdde3b vhost/vsock: always initialize seqpacket_allow
WARNING in __ip_make_skb net	-1	syz, C	done		54	864d	878d	27/29	800d	73451e9aaa24 net: validate SO_TXTIME clockid coming from userspace
general protection fault in coalesce_fill_reply net	2	syz, C	done		27	843d	848d	27/29	800d	74d6529b78f7 net: ethtool: Fix the panic caused by dev being null when dumping coalesce
WARNING in bpf_lwt_seg6_adjust_srh net bpf	-1	syz, C	done		30	835d	849d	27/29	800d	c13fda93aca1 bpf: Remove tst_run from lwt_seg6local_prog_ops.
INFO: task hung in rfkill_global_led_trigger_worker (2) net nfc	1	syz, C	error		1362	836d	1437d	26/29	835d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in rtnetlink_rcv_msg net	1	syz, C	inconclusive	inconclusive	1970	836d	2799d	26/29	835d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in addrconf_verify_work (8) net	1	syz, C	error		1294	835d	1039d	26/29	835d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
INFO: task hung in switchdev_deferred_process_work (2) net	1	syz, C	inconclusive		1226	836d	2278d	26/29	835d	d864319871b0 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
WARNING in skb_ensure_writable bpf net	-1	syz, C	done		2893	836d	913d	26/29	835d	2bbe3e5a2f4e bpf: Avoid splat in pskb_pull_reason
possible deadlock in __sock_map_delete net bpf	4	syz, C			14	878d	922d	26/29	843d	98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
WARNING in geneve_xmit net	-1	syz, C	done		42	910d	916d	26/29	854d	d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
WARNING in packet_setsockopt net	-1	syz, C			83	892d	931d	26/29	861d	86d43e2bf93c af_packet: avoid a false positive warning in packet_setsockopt()
kernel BUG in dev_gro_receive net	-1	syz, C	done		72	874d	890d	25/29	863d	be008726d0ac net: gro: initialize network_offset in network layer
KMSAN: uninit-value in nci_ntf_packet (2) net nfc	7	syz, C			13	866d	879d	25/29	864d	068648aab72c nfc/nci: Add the inconsistency check between the input data length and count
WARNING in sock_map_close bpf net	-1	syz, C	error		182	864d	927d	25/29	864d	4b4647add7d3 sock_map: avoid race between sock_map_close and sk_psock_put
possible deadlock in sock_hash_delete_elem (2) bpf net	4	syz, C			1127	865d	947d	25/29	864d	98e948fb60d4 bpf: Allow delete from sockmap/sockhash only if update is allowed
INFO: rcu detected stall in packet_release net	1	syz, C	unreliable		1	956d	878d	25/29	864d	fb66df20a720 net/sched: taprio: extend minimum interval restriction to entire cycle too
INFO: trying to register non-static key in __timer_delete_sync (2) net	-1	syz, C			45524	891d	909d	25/29	867d	3c668cef61ad net: hsr: init prune_proxy_timer sooner
WARNING in __inet_accept net	-1	syz, C	done		3	886d	886d	25/29	869d	26afda78cda3 UPSTREAM: net: relax socket state check at accept time.
KMSAN: uninit-value in nci_rx_work nfc net	7	syz, C			582	870d	1025d	25/29	869d	e4a87abf5885 nfc: nci: Fix uninit-value in nci_rx_work
KASAN: slab-use-after-free Read in unix_del_edges net	19	syz, C	done		2	917d	917d	25/29	869d	1af2dface5d2 af_unix: Don't access successor in unix_del_edges() during GC.
KMSAN: uninit-value in dev_map_lookup_elem bpf net	7	syz, C			3	935d	942d	25/29	869d	e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
KMSAN: uninit-value in sock_map_delete_elem bpf net	7	syz, C			44	871d	941d	25/29	869d	e8742081db7d bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
WARNING in qdisc_alloc net	-1	syz, C	error		1069	892d	906d	25/29	869d	86735b57c905 net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
KASAN: global-out-of-bounds Read in __nla_validate_parse net	17	syz, C			5	928d	928d	25/29	869d	8750539ba317 net: team: fix incorrect maxattr
KASAN: slab-use-after-free Read in vhost_task_fn kvm net virt	19	syz, C	done		2661	904d	906d	25/29	869d	db5247d9bf5c vhost_task: Handle SIGKILL by flushing work and exiting
KMSAN: uninit-value in geneve_xmit (3) net	7	syz, C			14	925d	933d	25/29	883d	d8a6213d70ac geneve: fix header validation in geneve[6]_xmit_skb
KMSAN: kernel-infoleak in __skb_datagram_iter (3) net	9	syz, C			25	886d	940d	25/29	883d	d313eb8b7755 net/sched: act_skbmod: prevent kernel-infoleak
KMSAN: uninit-value in gre_rcv (3) net	7	syz, C			3	938d	939d	25/29	883d	17af420545a7 erspan: make sure erspan_base_hdr is present in skb->head
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt net nfc	17	syz, C	error		5	921d	929d	25/29	883d	7a87441c9651 nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
WARNING in sock_map_delete_elem bpf net	-1	syz, C			17183	910d	948d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in scheduler_tick (3) bpf net	4	syz, C			1179	910d	946d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in rcu_exp_handler net bpf	4	syz, C			1	923d	919d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in rcu_report_exp_cpu_mult net bpf	4	syz, C	done		30	911d	949d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in try_to_wake_up (4) bpf net	4	syz, C	error		19	885d	948d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in ahci_single_level_irq_intr bpf net	4	syz, C			10	932d	940d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_map_unref bpf net	-1	syz, C	error		97	910d	924d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
WARNING in sock_hash_delete_elem bpf net	-1	syz, C	done		16982	910d	948d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in hrtimer_run_queues bpf net	4	syz, C	error		592	910d	947d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
possible deadlock in swake_up_one bpf net	4	syz, C			4	922d	920d	25/29	883d	ff9105993240 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
KASAN: slab-out-of-bounds Read in xsk_setsockopt bpf net	17	syz, C			17	922d	931d	25/29	883d	237f3cf13b20 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
KMSAN: uninit-value in ipvlan_queue_xmit (2) net	7	syz, C			2	957d	918d	25/29	883d	4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
possible deadlock in __unix_gc net	4	syz, C	done		5	910d	912d	25/29	883d	1971d13ffa84 af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
WARNING in gre_tap_xmit (2) net	-1	syz, C	done		67	891d	917d	25/29	883d	4b911a9690d7 nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
general protection fault in dev_map_enqueue net bpf	19	syz, C			676	883d	940d	25/29	883d	5bcf0dcbf906 xdp: use flags field to disambiguate broadcast redirect
KMSAN: uninit-value in nci_ntf_packet net nfc	7	syz, C			79	885d	1025d	25/29	883d	d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
possible deadlock in unix_del_edges net	4	syz, C			49	927d	931d	25/29	883d	b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
KASAN: slab-out-of-bounds Read in data_sock_setsockopt net	17	syz, C			2	928d	928d	25/29	883d	138b787804f4 mISDN: fix MISDN_TIME_STAMP handling
KMSAN: uninit-value in nci_dev_up net nfc	7	syz, C			7	942d	1001d	25/29	883d	d24b03535e5e nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
possible deadlock in unix_notinflight net	4	syz, C			7	910d	925d	25/29	883d	b46f4eaa4f0e af_unix: Clear stale u->oob_skb.
WARNING in cleanup_net (3) net	-1	syz			240	924d	1058d	25/29	924d	2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
WARNING in net_free (2) net	-1	syz			27	930d	977d	25/29	924d	2a750d6a5b36 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
KMSAN: uninit-value in cookie_v4_check net	7	syz, C			9	947d	953d	25/29	925d	956c0d619107 tcp: Clear req->syncookie in reqsk_alloc().
UBSAN: shift-out-of-bounds in taprio_change net	-1	syz, C	done		4	955d	955d	25/29	926d	343041b59b78 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
WARNING: suspicious RCU usage in in6_dump_addrs (2) net	4	syz, C	done		3	968d	968d	25/29	926d	67ea41d19d2a inet6: expand rcu_read_lock() scope in inet6_dump_addr()
KMSAN: uninit-value in hsr_get_node (2) net	7	syz, C			49	927d	1013d	25/29	926d	ddbec99f5857 hsr: Fix uninit-value access in hsr_get_node()
WARNING in mpls_gso_segment net	-1	syz, C	done		20	972d	974d	25/29	926d	025f8ad20f2e net: mpls: error out if inner headers are not set
BUG: unable to handle kernel NULL pointer dereference in dev_map_hash_update_elem net bpf	10	syz, C			2	970d	977d	25/29	926d	281d464a34f5 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
KMSAN: uninit-value in geneve_udp_encap_recv net	7	syz, C			2	971d	1001d	25/29	926d	1ca1ba465e55 geneve: make sure to pull inner header in geneve_rx()
kernel BUG in __nla_validate_parse net	-1	syz, C	done		13	955d	957d	25/29	926d	d8a21070b6e1 nexthop: Fix out-of-bounds access during attribute validation
BUG: sleeping function called from invalid context in __lock_sock_fast (2) net	5	syz, C			6	965d	967d	25/29	934d	d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
possible deadlock in tcp_diag_get_aux net	4	syz, C			117	959d	976d	25/29	934d	d6a9608af9a7 mptcp: fix possible deadlock in subflow diag
kernel BUG in eth_header (2) net	-1	syz, C			2	1010d	1010d	25/29	934d	dad555c816a5 llc: make llc_ui_sendmsg() more robust against bonding changes
BUG: unable to handle kernel NULL pointer dereference in unix_stream_sendmsg net bpf	10	syz, C			1	969d	969d	25/29	934d	4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready bpf net	10	syz, C	unreliable		15	964d	1084d	25/29	934d	4cd12c6065df bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
INFO: task hung in unix_stream_sendmsg net	1	syz, C	done		4	975d	978d	25/29	938d	aa82ac51d633 af_unix: Drop oob_skb ref before purging queue in GC.
memory leak in pppoe_sendmsg net	3	syz, C			26	1030d	2702d	25/29	938d	dc34ebd5c018 pppoe: Fix memory leak in pppoe_sendmsg()
WARNING in __unix_gc net	-1	syz, C			49	987d	993d	25/29	938d	1279f9d9dec2 af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
memory leak in virtual_ncidev_write (2) net nfc	3	syz, C			2	1038d	1199d	25/29	940d	bfb007aebe6b nfc: nci: free rx_data_reassembly skb on NCI device cleanup
KMSAN: uninit-value in IP6_ECN_decapsulate (2) net	7	syz, C			3	991d	1006d	25/29	940d	8d975c15c0cd ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
INFO: task hung in rtnl_lock (3) net	1	syz, C			128	945d	1297d	25/29	940d	3871aa01e1a7 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
KMSAN: uninit-value in geneve_xmit (2) net	7	syz, C			12	945d	1023d	25/29	941d	5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
WARNING in ip6gre_tunnel_xmit net	-1	syz, C	done		2	970d	971d	25/29	941d	5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
KASAN: use-after-free Read in __skb_flow_dissect (3) net	19	syz, C			1	1015d	1025d	25/29	941d	5ae1e9922bbd net: ip_tunnel: prevent perpetual headroom growth
INFO: task hung in addrconf_dad_work (3) net	1	syz, C			185	955d	996d	25/29	941d	ba5e1272142d netdevsim: avoid potential loop in nsim_dev_trap_report_work()
KMSAN: kernel-infoleak in __skb_datagram_iter (2) net	19	syz, C			126	942d	993d	25/29	941d	661779e1fcaf netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
INFO: task hung in unix_dgram_sendmsg net	1	syz, C	done		36	967d	986d	25/29	942d	25236c91b5ab af_unix: Fix task hung while purging oob_skb in GC.
KMSAN: uninit-value in __llc_lookup_established net	7	syz, C			46	1009d	1052d	25/29	942d	e3f9bed9bee2 llc: Drop support for ETH_P_TR_802_2.
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2) net	7	syz, C			17	996d	1022d	25/29	995d	d375b98e0248 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
KASAN: slab-use-after-free Read in nla_find bpf net	19	syz, C	done		4	1040d	1039d	25/29	996d	2130c519a401 bpf: Use nla_ok() instead of checking nla_len directly
KASAN: slab-use-after-free Read in nfc_alloc_send_skb net nfc	19	syz, C	error		3	1049d	1079d	25/29	996d	c95f919567d6 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
general protection fault in hfsc_tcf_block net	2	syz, C	done		1020	1019d	1027d	25/29	996d	94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
WARNING in __sk_msg_free bpf net	-1	syz, C	done		4	1023d	1021d	25/29	996d	dc9dfc8dc629 net: tls, fix WARNIING in __sk_msg_free
KASAN: slab-out-of-bounds Read in dsa_user_changeupper net	17	syz, C	done		1303	1003d	1017d	25/29	996d	844f104790bd net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
general protection fault in qdisc_create net	10	syz, C	done		2821	1019d	1027d	25/29	996d	94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
WARNING in dev_watchdog (2) net	-1	syz, C	inconclusive		6791	999d	2398d	25/29	996d	e316dd1cf135 net: don't dump stack on queue timeout
KMSAN: uninit-value in netif_skb_features (2) net	7	syz, C			9	1040d	1128d	25/29	996d	9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
WARNING in ip6_route_info_create net	-1	syz, C	done		241	1047d	1050d	25/29	996d	a3c205d0560f ipv6: do not check fib6_has_expires() in fib6_info_release()
general protection fault in page_pool_unlist net	2	syz, C	done		648	1057d	1059d	25/29	996d	f9893fdac319 net: page_pool: fix general protection fault in page_pool_unlist
KMSAN: uninit-value in validate_xmit_skb net	7	syz, C			21	998d	1015d	25/29	996d	9181d6f8a2bb net: add more sanity check in virtio_net_hdr_to_skb()
general protection fault in htb_tcf_block net	2	syz, C	done		885	1019d	1027d	25/29	996d	94e2557d086a net: sched: move block device tracking into tcf_block_get/put_ext()
general protection fault in skb_segment (4) net	8	syz, C	error		4	1041d	1048d	25/29	1005d	23d05d563b7e net: prevent mss overflow in skb_segment()
WARNING in fib6_add (5) net	-1	syz, C	done		6	1050d	1213d	25/29	1005d	75475bb51e78 ipv6: fix potential NULL deref in fib6_add()
KASAN: slab-out-of-bounds Read in dns_resolver_preparse net	17	syz, C	done		46	1031d	1044d	25/29	1006d	1997b3cb4217 keys, dns: Fix missing size check of V1 server-list header
general protection fault in dccp_write_xmit (2) net	8	syz, C	done		32	1038d	1093d	25/29	1006d	cac23b7d7627 net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
KASAN: null-ptr-deref Write in unix_stream_bpf_update_proto bpf net	12	syz, C	done		54	1027d	1057d	25/29	1006d	8d6650646ce4 bpf: syzkaller found null ptr deref in unix_bpf proto add
memory leak in skb_copy (2) nfc net	3	syz			3	1079d	1196d	25/29	1006d	84d2db91f14a nfc: virtual_ncidev: Add variable to check if ndev is running
general protection fault in tls_merge_open_record net	2	syz	unreliable		5	1089d	1089d	25/29	1006d	53f2cb491b50 tls: fix NULL deref on tls_sw_splice_eof() with empty record
KASAN: slab-use-after-free Read in unix_stream_read_actor net	19	syz, C	error		6	1061d	1077d	25/29	1006d	4b7b492615cf af_unix: fix use-after-free in unix_stream_read_actor()
general protection fault in ptp_ioctl net	2	syz, C	done		8	1081d	1082d	25/29	1006d	8a4f030dbced ptp: Fixes a null pointer dereference in ptp_ioctl
kernel BUG in ip6gre_header (2) net	-1	syz, C			2	1105d	1120d	25/29	1006d	3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
BUG: unable to handle kernel paging request in nsim_bpf net	8	syz, C			3	1063d	1079d	25/29	1006d	c0c6bde586c7 netdevsim: Don't accept device bound programs
kernel BUG in ipgre_header net	-1	syz, C			4	1056d	1070d	25/29	1006d	3cffa2ddc4d3 bonding: stop the device in bond_setup_by_slave()
KASAN: stack-out-of-bounds Read in tcp_inbound_hash net	17	syz, C	done		28	1076d	1089d	25/29	1016d	02f0717e9835 net/tcp: fix possible out-of-bounds reads in tcp_hash_fail()
WARNING in dev_index_reserve (2) net	-1	syz, C	done		68	1096d	1106d	25/29	1016d	cbfbfe3aee71 tun: prevent negative ifindex
KMSAN: uninit-value in dccp_v6_err net	7	syz, C			4	1131d	1136d	25/29	1019d	6af289746a63 dccp: fix dccp_v4_err()/dccp_v6_err() again
general protection fault in scatterwalk_copychunks (4) net crypto	19	syz, C	done	done	1341	1035d	2047d	25/29	1035d	cfaa80c91f6f net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
WARNING: zero-size vmalloc in print_tainted bpf net	-1	syz, C			79	1229d	1263d	25/29	1037d	a12bbb3cccf0 xdp: Fix zero-size allocation warning in xskq_create()
KMSAN: uninit-value in IP6_ECN_decapsulate net	7	syz, C			981	1038d	2954d	25/29	1037d	484b4833c604 hsr: Fix uninit-value access in fill_frame_info()
memory leak in kcm_sendmsg (2) net	3	syz, C			1	1150d	1184d	25/29	1037d	c821a88bd720 kcm: Fix memory leak in error path of kcm_sendmsg()
KMSAN: uninit-value in virtio_transport_recv_pkt virt kvm net	7	syz, C			20713	1078d	1092d	25/29	1037d	34c4effacfc3 virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
WARNING in skb_warn_bad_offload (4) net	-1	syz, C	done		1763	1099d	1127d	25/29	1037d	fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
WARNING in __ip6_append_data net	-1	syz, C	unreliable		5	1107d	1136d	25/29	1037d	9d4c75800f61 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
BUG: corrupted list in ptp_open net	8	syz, C	done		7	1083d	1092d	25/29	1037d	1bea2c3e6df8 ptp: fix corrupted list in ptp_open b714ca2ccf6a ptp: ptp_read should not release queue
WARNING in skb_checksum_help (2) net	-1	syz, C	done		3816	1037d	1127d	25/29	1037d	fc8b2a619469 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
BUG: corrupted list in nfc_llcp_register_device net nfc	22	syz, C	error		136	1113d	1402d	25/29	1037d	dfc7f7a988da net: nfc: llcp: Add lock when modifying device list
UBSAN: shift-out-of-bounds in nci_activate_target net nfc	-1	syz, C	done		6	1115d	1299d	25/29	1037d	354a6e707e29 nfc: nci: assert requested protocol is valid
WARNING in inet_csk_get_port (2) net	-1	syz, C	done		88	1098d	1128d	25/29	1037d	8702cf12e6ba tcp: Fix listen() warning with v4-mapped-v6 address.
KMSAN: uninit-value in fq_change net	7	syz, C			8	1079d	1081d	25/29	1037d	f1a3b283f852 UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
KMSAN: uninit-value in llc_station_rcv net	7	syz, C			2	1092d	1101d	25/29	1037d	7b3ba18703a6 llc: verify mac len before reading mac header
INFO: rcu detected stall in sys_close (5) net	1	syz, C	done		1	1151d	1151d	23/29	1106d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in unregister_vlan_dev net	-1	syz, C	done		1310	1159d	1168d	23/29	1106d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
general protection fault in generic_hwtstamp_ioctl_lower net	2	syz, C	done		7	1173d	1176d	23/29	1106d	c35e927cbe09 net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib()
INFO: rcu detected stall in unix_release net	1	syz, C	done		1	1170d	1166d	23/29	1106d	da71714e359b net/sched: fix a qdisc modification with ambiguous command request
WARNING: refcount bug in xp_put_pool bpf net	13	syz, C	done		2	1181d	1180d	23/29	1106d	85c2c79a0730 xsk: fix refcount underflow in error path
WARNING in ip6_tnl_exit_batch_net net	-1	syz, C	done		29	1162d	1168d	23/29	1106d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: stack-out-of-bounds Write in __nla_validate_parse net	21	syz, C	done		4	1174d	1189d	23/29	1106d	4d50e50045aa net: flower: fix stack-out-of-bounds in fl_set_key_cfm()
WARNING: bad unlock balance in sockopt_release_sock net	4	syz, C	done		2	1155d	1155d	23/29	1106d	8be6f88b9d3f inet: fix IP_TRANSPARENT error handling
KASAN: slab-use-after-free Read in xsk_diag_dump net bpf	19	syz, C	done		9	1142d	1151d	23/29	1106d	3e019d8a05a3 xsk: Fix xsk_diag use-after-free error during socket cleanup
general protection fault in skb_segment (3) net	2	syz, C	done		2	1166d	1166d	23/29	1106d	b616be6b9768 net: do not allow gso_size to be set to GSO_BY_FRAGS
BUG: soft lockup in fq_pie_timer (4) net	1	syz			5	1137d	1187d	23/29	1106d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
INFO: rcu detected stall in nsim_dev_trap_report_work net	1	syz			4	1142d	1185d	23/29	1106d	8c21ab1bae94 net/sched: fq_pie: avoid stalls in fq_pie_timer()
WARNING in rtnl_dellink (3) net	-1	syz, C	done		492	1159d	1168d	23/29	1106d	ace0ab3a4b54 Revert "vlan: Fix VLAN 0 memory leak"
KASAN: slab-use-after-free Read in team_device_event net	19	syz, C	done		2	1143d	1141d	23/29	1106d	6afcf0fb9270 Revert "net: team: do not use dynamic lockdep key"
WARNING in tcx_uninstall net bpf	-1	syz, C	done		7	1181d	1185d	23/29	1106d	079082c60aff tcx: Fix splat during dev unregister
KASAN: slab-out-of-bounds Read in do_csum net	19	syz, C			160	1111d	1152d	23/29	1106d	8bd795fedb84 arm64: csum: Fix OoB access in IP checksum code for negative lengths
WARNING: ODEBUG bug in ingress_destroy net	-1	syz, C	done		16	1187d	1190d	23/29	1106d	dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
WARNING: ODEBUG bug in tcx_uninstall bpf net	-1	syz, C	done		38	1186d	1190d	23/29	1106d	dc644b540a2d tcx: Fix splat in ingress_destroy upon tcx_entry_free
KASAN: slab-use-after-free Write in mini_qdisc_pair_swap net	22	syz, C	error		76	1156d	1309d	23/29	1120d	84ad0af0bccd net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting c7cfbd115001 net/sched: sch_ingress: Only create under TC_H_INGRESS
WARNING in sock_i_ino net	-1	syz, C	error		22	1213d	1217d	23/29	1120d	25a9c8a4431c netlink: Add __sock_i_ino() for __netlink_diag_dump().
KASAN: stack-out-of-bounds Read in ip6mr_ioctl net	21	syz, C	done		192	1219d	1224d	23/29	1120d	3a4f0edbb793 ipv6: fix a typo in ip6mr_sk_ioctl()
kernel BUG in ip6gre_header net	-1	syz, C			5	1156d	1227d	23/29	1120d	9eed321cde22 net: lapbether: only support ethernet devices
WARNING in unreserve_psock net	-1	syz, C	done		2816	1220d	1227d	23/29	1120d	9f8d0dc0ec4a kcm: Fix unnecessary psock unreservation.
WARNING: refcount bug in fib6_nh_init net	13	syz, C	done		45	1220d	1225d	23/29	1120d	3515440df461 ipv6: also use netdev_hold() in ip6_route_check_nh()
KASAN: stack-out-of-bounds Read in skb_splice_from_iter net	17	syz, C	done		64	1220d	1229d	23/29	1120d	5a6f6873606e ip, ip6: Fix splice to raw and ping sockets
KASAN: slab-out-of-bounds Read in taprio_dequeue_from_txq net	17	syz	error		4	1234d	1259d	23/29	1120d	be3618d96510 net/sched: taprio: fix slab-out-of-bounds Read in taprio_dequeue_from_txq
WARNING in scm_recv net	-1	syz, C	done		8	1207d	1210d	23/29	1120d	603fc57ab70c af_unix: Skip SCM_PIDFD if scm->pid is NULL.
KASAN: stack-out-of-bounds Read in ipmr_ioctl net	21	syz, C	done		208	1219d	1224d	23/29	1120d	634236b34d7a net: remove sk_is_ipmr() and sk_is_icmpv6() helpers
BUG: soft lockup in addrconf_rs_timer (2) net	1	syz, C			51	1219d	1240d	23/29	1207d	cd2b8113c2e8 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
KMSAN: uninit-value in xfrm_state_find net	17	syz, C	error	done	215	1252d	3052d	22/29	1209d	3d776e31c841 xfrm: Reject optional tunnel/BEET mode templates in outbound policies
memory leak in tcf_pedit_init net	3	syz, C			1	1273d	1273d	22/29	1232d	1b483d9f5805 net/sched: act_pedit: free pedit keys on bail from offset check
general protection fault in pause_prepare_data net	2	syz, C	error		34	1366d	1368d	22/29	1232d	f5be9caf7bf0 net: ethtool: fix NULL pointer dereference in pause_prepare_data()
KASAN: use-after-free Read in do_csum net	19	syz, C			72	1235d	1400d	22/29	1232d	1ac885574470 inet: control sockets should not use current thread task_frag
KMSAN: uninit-value in ethnl_set_linkmodes (2) net	7	syz, C			40	1266d	1571d	22/29	1232d	9ad685dbfe7e ethtool: Fix uninitialized number of lanes
WARNING in htb_destroy net	-1	syz, C	done		2	1351d	1351d	22/29	1232d	4fab64126891 net/sched: fix error recovery in qdisc_create()
general protection fault in ethnl_set_plca_cfg net	2	syz, C	done		37	1376d	1376d	22/29	1232d	28dbf774bc87 plca.c: fix obvious mistake in checking retval
memory leak in tcindex_set_parms (3) net	3	syz, C			1	1420d	1416d	22/29	1232d	8c710f75256b net/sched: Retire tcindex classifier
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around bpf net	10	syz, C	done		29	1312d	1317d	22/29	1232d	e5995bc7e2ba bpf, test_run: fix crashes due to XDP frame overwriting/corruption
general protection fault in virtio_transport_purge_skbs net	2	syz, C	done		3	1310d	1309d	22/29	1232d	b465518dc27d vsock/loopback: use only sk_buff_head.lock to protect the packet queue
WARNING in cleanup_net (2) net	-1	syz, C	error		72	1267d	1295d	22/29	1232d	9744d2bf1976 smc: Fix use-after-free in tcp_write_timer_handler().
KASAN: use-after-free Read in cfusbl_device_notify net	19	syz, C	done		341	1324d	1471d	22/29	1232d	9781e98a9711 net: caif: Fix use-after-free in cfusbl_device_notify()
WARNING in ip6erspan_tunnel_xmit (2) net	-1	syz, C	unreliable		5	1312d	1312d	22/29	1232d	8e50ed774554 erspan: do not use skb_mac_header() in ndo_start_xmit()
KMSAN: uninit-value in qrtr_tx_resume net arm-msm	7	syz, C			8	1306d	1367d	22/29	1232d	6417070918de net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
WARNING in nla_get_range_unsigned (2) net	-1	syz, C	done		433	1308d	1344d	22/29	1232d	b20b8aec6ffc devlink: Fix netdev notifier chain corruption
BUG: unable to handle kernel paging request in atm_tc_destroy net	8	syz, C	error		3	1351d	1350d	22/29	1232d	4fab64126891 net/sched: fix error recovery in qdisc_create()
kernel BUG in ip_frag_next net	-1	syz, C	done		9	1366d	1373d	22/29	1232d	f72ff8b81ebc net: fix kfree_skb_list use of skb_mark_not_on_list
WARNING: locking bug in inet_autobind net	4	syz, C	done	error	103	1394d	2717d	22/29	1232d	0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
BUG: scheduling while atomic in msleep net	5	syz, C	done		40	1366d	1374d	22/29	1232d	ea4fdbaa2f77 net/sched: sch_taprio: do not schedule in taprio_reset()
WARNING in __dev_queue_xmit (2) net	-1	syz, C			76	1265d	1336d	22/29	1232d	693aa2c0d9b6 ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
general protection fault in bpf_struct_ops_link_create bpf net	2	syz, C	done		17	1306d	1309d	22/29	1232d	55fbae05476d bpf: Check IS_ERR for the bpf_map_get() return value
WARNING: refcount bug in qrtr_recvmsg (2) arm-msm net	13	syz, C	error		2	1317d	1310d	22/29	1232d	44d807320000 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
INFO: trying to register non-static key in net_free net	-1	syz	error		17982	1340d	1353d	22/29	1232d	6e77a5a4af05 net: initialize net->notrefcnt_tracker earlier
WARNING: suspicious RCU usage in bond_mii_monitor net	4	syz, C			13	1386d	1405d	22/29	1232d	42c7ded0eeac bonding: fix lockdep splat in bond_miimon_commit()
BUG: stack guard page was hit in inet6_release bpf net	-1	syz, C	done		4	1367d	1416d	22/29	1232d	ddce1e091757 bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
possible deadlock in l2tp_tunnel_register (2) net	4	syz, C			153	1327d	1336d	22/29	1232d	0b2c59720e65 l2tp: close all race conditions in l2tp_tunnel_register()
KASAN: slab-use-after-free Read in tcf_action_destroy net	19	syz, C	error		32	1260d	1334d	22/29	1232d	dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
possible deadlock in release_sock net	4	syz, C	done		42	1373d	1375d	22/29	1232d	b9fb10d131b8 l2tp: prevent lockdep issue in l2tp_tunnel_register()
memory leak in nfc_genl_se_io net nfc	3	syz, C			1	1347d	1343d	22/29	1232d	25ff6f8a5a3b nfc: fix memory leak of se_io context in nfc_genl_se_io
general protection fault in tcindex_set_parms net	2	syz, C	done		2	1347d	1347d	22/29	1232d	42018a322bd4 net/sched: tcindex: search key must be 16 bits
kernel BUG in fou_build_udp net	-1	syz, C			1	1268d	1268d	22/29	1232d	c88f8d5cd95f UPSTREAM: sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
kernel BUG in rxrpc_put_call afs net	-1	syz, C	done		9	1370d	1382d	22/29	1232d	01644a1f98ff rxrpc: Fix wrong error return in rxrpc_connect_call()
kernel BUG in rxrpc_put_peer net afs	-1	syz, C			80	1373d	1416d	22/29	1232d	9d35d880e0e4 rxrpc: Move client call connection to the I/O thread 03fc55adf876 rxrpc: Only disconnect calls in the I/O thread
INFO: rcu detected stall in devlink_nl_cmd_port_get_dumpit net	1	syz			7	1331d	1348d	22/29	1232d	b20b8aec6ffc devlink: Fix netdev notifier chain corruption
WARNING in inet_sock_destruct (3) net	-1	syz, C			87	1236d	1339d	22/29	1232d	880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
KMSAN: uninit-value in ipv6_find_tlv net	7	syz, C			271	1274d	2627d	22/29	1232d	ea30388baebc ipv6: Fix an uninit variable access bug in __ip6_make_skb()
WARNING in default_device_exit_batch (4) net	-1	syz, C	error		954	1308d	1435d	22/29	1232d	e667d4690986 bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
KMSAN: kernel-infoleak in copyout (2) net	17	syz, C			6723	1233d	2401d	22/29	1232d	8222d5910dae xfrm: Zero padding when dumping algos and encap
KASAN: null-ptr-deref Read in __fl_put net	11	syz, C	error		16	1314d	1333d	22/29	1232d	dfd2f0eb2347 net/sched: flower: fix fl_change() error recovery path
kernel BUG in inet_sock_destruct net	-1	syz, C	error		3	1389d	1388d	22/29	1232d	1ac885574470 inet: control sockets should not use current thread task_frag
BUG: corrupted list in taprio_destroy net	8	syz, C	done		2	1350d	1350d	22/29	1232d	4fab64126891 net/sched: fix error recovery in qdisc_create()
KASAN: invalid-free in skb_free_head (2) net	24	syz, C	error		25	1274d	1339d	22/29	1232d	880ce5f20033 net: avoid skb end_offset change in __skb_unclone_keeptruesize()
KASAN: slab-out-of-bounds Read in sk_psock_get net	17	syz, C	done	error	9	1550d	1884d	22/29	1289d	2a0133723f9e net: fix refcount bug in sk_psock_get (2)
possible deadlock in nci_start_poll net nfc	4	syz, C	error	done	83	1337d	1438d	22/29	1290d	b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
kernel BUG in pskb_expand_head net	-1	syz, C	done		1600	1351d	1803d	22/29	1336d	5f33a09e769a can: isotp: convert struct tpcon::{idx,len} to unsigned int 7c759040c1dd can: isotp: fix potential CAN frame reception race in isotp_rcv()
WARNING in ipgre_xmit net	-1	syz, C	done		9916	1587d	1603d	22/29	1336d	8d21e9963bec ip_gre: test csum_start instead of transport header
KASAN: wild-memory-access Read in skb_copy_bits net	17	syz, C			2	1505d	1505d	22/29	1336d	0d24148bd276 inet: ping: fix recent breakage
WARNING: kmalloc bug in xdp_umem_create (2) bpf net	-1	syz, C	done		21	1716d	1782d	22/29	1336d	0708a0afe291 mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self bpf net	5	syz, C	done		151	1446d	1468d	22/29	1336d	2d1f274b95c6 skmsg: pass gfp argument to alloc_sk_msg()
KASAN: use-after-free Read in ipvlan_queue_xmit (3) net	19	syz, C	error	error	8	1540d	2138d	22/29	1336d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
general protection fault in llc_build_and_send_xid_pkt net	2	syz, C	done		2	1674d	1674d	22/29	1336d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
WARNING in __skb_flow_dissect (4) net	-1	syz, C	error		6	1447d	1457d	22/29	1336d	9f225444467b ppp: associate skb with a device at tx
WARNING in inet_csk_get_port net	-1	syz, C	done		1166	1385d	1613d	22/29	1336d	593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
KASAN: use-after-free Read in free_netdev (3) net	19	syz, C	inconclusive		130	1429d	1584d	22/29	1336d	3b9bc84d3111 net: tun: unlink NAPI from device on destruction
WARNING in skb_try_coalesce net	-1	syz, C	error		1521	1608d	2062d	22/29	1336d	763087dab975 net: add skb_set_end_offset() helper
general protection fault in sock_reserve_memory net	2	syz, C	done		2	1712d	1712d	22/29	1336d	25206111512d crypto: af_alg - get rid of alg_memory_allocated
WARNING in tcp_enter_loss (3) net	-1	syz, C	inconclusive		7	1454d	1750d	22/29	1336d	0c175da7b037 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
general protection fault in tls_sk_proto_close (3) net	2	syz, C	done		276	1585d	1985d	22/29	1336d	69135c572d1f net/tls: fix tls_sk_proto_close executed repeatedly
possible deadlock in l2tp_tunnel_register net	4	syz, C	error		9492	1336d	1436d	22/29	1336d	af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
general protection fault in em_cmp_match net	10	syz, C			4	1412d	1408d	22/29	1336d	9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
general protection fault in ip6_rcv_core net	8	syz, C	done		275	1427d	1653d	22/29	1336d	0339d25a2807 ipv6: fix NULL deref in ip6_rcv_core()
KASAN: use-after-free Read in rxrpc_lookup_local afs net	22	syz, C			3997	1387d	1416d	22/29	1336d	8fbcc83334a7 rxrpc: Fix I/O thread startup getting skipped eaa02390adb0 rxrpc: Fix NULL deref in rxrpc_unuse_local()
kernel BUG in warn_crc32c_csum_combine net exfat	-1	syz, C	error		17	1451d	1460d	22/29	1336d	7f57f8165cb6 af_key: Fix send_acquire race with pfkey_register
WARNING in u32_change net	-1	syz, C			28	1391d	1489d	22/29	1336d	7cba18332e36 net: sched: cls_u32: Avoid memcpy() false-positive warning
general protection fault in metadata_dst_free net	2	syz, C			348	1467d	1506d	22/29	1336d	c52add61c27e macsec: don't free NULL metadata_dst
memory leak in virtual_ncidev_write net nfc	3	syz, C			1	1435d	1435d	22/29	1336d	53270fb0fd77 NFC: nci: fix memory leak in nci_rx_data_packet()
memory leak in __vsock_create net virt io-uring	3	syz, C			1	1661d	1657d	22/29	1336d	7e97cfed9929 vsock: Fix memory leak in vsock_connect()
WARNING in skb_tunnel_check_pmtu net	-1	syz, C	done		8	1578d	1584d	22/29	1336d	853a76148802 tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
memory leak in ipv6_renew_options net	3	syz, C			1	1562d	1558d	22/29	1336d	e27326009a3d net: ping6: Fix memleak in ipv6_renew_options().
possible deadlock in kcm_ioctl net	4	syz, C	error		20	1522d	1524d	22/29	1336d	8fc29ff3910f kcm: fix strp_init() order and cleanup
memory leak in __tcp_send_ack net	3	syz, C			10	1474d	2005d	22/29	1336d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
kernel BUG in __skb_gso_segment net	-1	syz, C	done		11	1604d	1602d	22/29	1336d	e9d3f80935b6 net/af_packet: make sure to pull mac header
general protection fault in tcp_create_openreq_child net	2	syz, C	unreliable		83	1641d	1644d	22/29	1336d	ba5a4fdd63ae tcp: make sure treq->af_specific is initialized
KMSAN: uninit-value in ipvlan_queue_xmit net	7	syz, C			2	1515d	2098d	22/29	1336d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
possible deadlock in nci_set_local_general_bytes net nfc	4	syz, C			32	1387d	1438d	22/29	1336d	b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
general protection fault in skb_clone (5) net	10	syz, C	done		7	1452d	1470d	22/29	1336d	d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
KMSAN: kernel-infoleak in _copy_to_iter (7) net	21	syz, C			138977	1337d	1689d	22/29	1336d	633593a80898 sctp: fix kernel-infoleak for SCTP sockets
possible deadlock in virtual_nci_close nfc net	4	syz, C	done		939	1337d	1439d	22/29	1336d	b2e44aac91b2 NFC: nci: Allow to create multiple virtual nci devices
BUG: sleeping function called from invalid context in smc_pnet_add net	5	syz, C	done		45	1719d	1719d	22/29	1336d	94fdd7c02a56 net/smc: use GFP_ATOMIC allocation in smc_pnet_add_eth()
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp net bpf	21	syz, C	done		18	1712d	1730d	22/29	1336d	a6763080856f bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
possible deadlock in strp_work net	4	syz, C	error		4	1522d	1524d	22/29	1336d	8fc29ff3910f kcm: fix strp_init() order and cleanup
WARNING in devl_port_unregister net	-1	syz, C			1690	1340d	1442d	22/29	1336d	1fb22ed67195 devlink: Fix warning when unregistering a port
WARNING: suspicious RCU usage in corrupted (2) net	4	syz, C	unreliable		7	1581d	1592d	22/29	1336d	4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
kernel BUG in vhost_get_vq_desc virt kvm net	-1	syz, C	inconclusive		19	1700d	1713d	22/29	1336d	a58da53ffd70 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
WARNING in skb_warn_bad_offload (3) net	-1	syz, C	done		115	1337d	1474d	22/29	1336d	87445f369cca ipv6: ping: fix wrong checksum for large frames
WARNING in arp_ioctl net	-1	syz, C	error	done	17	1409d	1478d	22/29	1336d	b5f0de6df6dc net: dev: Convert sa_data to flexible array in struct sockaddr
WARNING in ipvlan_queue_xmit net	-1	syz, C	inconclusive		4	1515d	1515d	22/29	1336d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
WARNING: still has locks held in tls_rx_reader_lock net	4	syz, C	done		4	1554d	1555d	22/29	1336d	dde06aaa89b7 tls: rx: release the sock lock on locking timeout
WARNING: suspicious RCU usage in in6_dump_addrs net	4	syz, C	unreliable		613	1549d	1592d	22/29	1336d	4e43e64d0f13 ipv6: fix lockdep splat in in6_dump_addrs()
KASAN: use-after-free Read in tcp_retransmit_timer (5) net	19	syz, C	unreliable		16000	1420d	2433d	22/29	1336d	3a58f13a881e net: rds: acquire refcount on TCP sockets
WARNING in inet_csk_destroy_sock (2) io-uring net	-1	syz, C	done		8	1385d	1472d	22/29	1336d	e0833d1fedb0 dccp/tcp: Fixup bhash2 bucket when connect() fails.
WARNING in __vunmap net	-1	syz, C	error	error	154	1486d	2806d	22/29	1336d	8a04d2fc700f xfrm: Update ipcomp_scratches with NULL when freed
memory leak in napi_get_frags net	3	syz, C			11	2086d	2107d	22/29	1336d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
memory leak in netlink_policy_dump_add_policy net	3	syz, C			1	1536d	1532d	22/29	1336d	249801360db3 net: genl: fix error path memory leak in policy dumping
general protection fault in llc_ui_connect net	2	syz, C	done		17	1669d	1673d	22/29	1336d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
memory leak in ndisc_send_rs net	3	syz, C			2	1833d	1880d	22/29	1336d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
general protection fault in llc_ui_sendmsg net	2	syz, C	done		365	1669d	1674d	22/29	1336d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
KASAN: slab-out-of-bounds Read in packet_recvmsg net	21	syz, C	inconclusive		12	1685d	2086d	22/29	1336d	c700525fcc06 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
INFO: task hung in vhost_work_dev_flush virt kvm net	1	syz, C	error		2	1716d	1707d	22/29	1336d	e2ae38cf3d91 vhost: fix hung thread due to erroneous iotlb entries
stack segment fault in skb_clone net	2	syz, C	unreliable	inconclusive	3	1591d	1776d	22/29	1336d	d8b57135fd9f net: hsr: avoid possible NULL deref in skb_clone()
WARNING: suspicious RCU usage in bond_ethtool_get_ts_info net	4	syz, C	done		6	1622d	1624d	22/29	1336d	9b80ccda233f bonding: fix missed rcu protection
general protection fault in rlb_req_update_slave_clients net	2	syz, C	inconclusive		3	1600d	1600d	22/29	1336d	ab84db251c04 net: bonding: fix possible NULL deref in rlb code
KASAN: invalid-free in tcp_disconnect net	24	syz, C	unreliable		74	1465d	1479d	22/29	1336d	72e560cb8c6f tcp: cdg: allow tcp_cdg_release() to be called multiple times
memory leak in vlan_dev_set_egress_priority (2) net	3	syz, C			1	1568d	1568d	22/29	1336d	72a0b329114b vlan: fix memory leak in vlan_newlink()
WARNING in bpf_test_finish bpf net	-1	syz, C	done		3	1698d	1698d	22/29	1336d	530e214c5b5a bpf, test_run: Fix overflow in XDP frags bpf_test_finish
KASAN: null-ptr-deref Write in kcm_tx_work (3) net	12	syz, C	inconclusive	inconclusive	7	1483d	1584d	22/29	1336d	ec7eede369fe kcm: avoid potential race in kcm_tx_work
WARNING: refcount bug in sk_psock_get (2) net	13	syz, C	done		4	1561d	1602d	22/29	1336d	2a0133723f9e net: fix refcount bug in sk_psock_get (2)
WARNING in nci_send_cmd net nfc	-1	syz, C			13	1423d	1437d	22/29	1336d	0ad6bded175e nfc/nci: fix race with opening and closing
memory leak in mld_newpack net	3	syz, C			2	1497d	1915d	22/29	1336d	a43206156263 usbnet: Fix memory leak in usbnet_disconnect()
WARNING in netif_napi_add_weight net	-1	syz, C	inconclusive	done	45	1576d	1588d	22/29	1336d	3b9bc84d3111 net: tun: unlink NAPI from device on destruction
BUG: using smp_processor_id() in preemptible code in tun_chr_write_iter net	4	syz, C	done		1834	1676d	1685d	22/29	1336d	fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
BUG: using smp_processor_id() in preemptible code in netdev_core_stats_alloc net	4	syz, C	error		2210	1676d	1685d	22/29	1336d	fc93db153b01 net: disable preemption in dev_core_stats_XXX_inc() helpers
BUG: missing reserved tailroom bpf net	-1	syz, C	done		2	1688d	1687d	22/29	1336d	b6f1f780b393 bpf, test_run: Fix packet size check for live packet mode
possible deadlock in ___neigh_create net	4	syz, C	error		24	1722d	1725d	22/29	1336d	4a81f6da9cb2 net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
general protection fault in llc_build_and_send_ui_pkt net	2	syz, C	done		26	1670d	1673d	22/29	1336d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
WARNING in tls_strp_done net	-1	syz, C	error		22	1526d	1531d	22/29	1336d	849f16bbfb68 tls: rx: react to strparser initialization errors
KASAN: slab-out-of-bounds Write in __build_skb_around net bpf	21	syz, C	error		2536	1410d	1424d	22/29	1336d	ce098da1497c skbuff: Introduce slab_build_skb()
WARNING in sk_stream_kill_queues (8) net	-1	syz, C	unreliable		4268	1340d	1576d	22/29	1336d	e9c6e7976026 tcp: fix sock skb accounting in tcp_read_skb()
WARNING in mroute_clean_tables net	-1	syz, C			10	1696d	1716d	22/29	1336d	5611a00697c8 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
general protection fault in pse_prepare_data net	10	syz, C	inconclusive		6	1386d	1465d	22/29	1336d	46cdedf2a0fa ethtool: pse-pd: fix null-deref on genl_info in dump
KMSAN: uninit-value in bcmp net	19	syz, C	error	done	907	1372d	2693d	22/29	1336d	4f1dc7d9756e fs/ntfs3: Validate attribute name offset
UBSAN: shift-out-of-bounds in tcf_pedit_init net	-1	syz, C	done		59	1617d	1624d	22/29	1336d	4d42d54a7d6a net/sched: act_pedit: sanitize shift argument before usage
general protection fault in llc_build_and_send_test_pkt net	2	syz, C	done		25	1669d	1673d	22/29	1336d	2d327a79ee17 llc: only change llc->dev when bind() succeeds
BUG: unable to handle kernel NULL pointer dereference in em_u32_match net	10	syz, C			2	1392d	1448d	22/29	1336d	9cd3fd2054c3 net_sched: reject TCF_EM_SIMPLE case for complex ematch module
general protection fault in skb_unlink net	2	syz, C	done	error	8	1506d	3067d	22/29	1336d	5121197ecc5d kcm: close race conditions on sk_receive_queue
WARNING in sk_destruct net	-1	syz, C	done		454	1612d	1739d	22/29	1336d	ebdc1a030962 tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
KASAN: slab-out-of-bounds Read in ipvlan_queue_xmit net	17	syz, C	error	error	8	1699d	2176d	22/29	1336d	81225b2ea161 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
WARNING in napi_complete_done net	-1	syz, C	error		104	1444d	1448d	22/29	1336d	07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
KASAN: use-after-free Read in ip6mr_sk_done net	19	syz, C	done		10988	1451d	1720d	22/29	1336d	7d9b1b578d67 ip6mr: fix use-after-free in ip6mr_sk_done()
KMSAN: uninit-value in tcp_recvmsg net	7	syz, C			25918	1459d	1584d	22/29	1336d	1228b34c8d0e net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
KASAN: use-after-free Read in inet_bind2_bucket_find net io-uring	19	syz, C	done		13	1591d	1598d	22/29	1336d	593d1ebe00a4 Revert "net: Add a second bind table hashed by port and address"
possible deadlock in __inet_inherit_port net	4	syz, C	done		85	1374d	1435d	22/29	1336d	af295e854a4e l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
INFO: rcu detected stall in mld_ifc_work net	1	syz, C	inconclusive		1	1713d	1713d	22/29	1336d	5740d0689096 net: sched: limit TC_ACT_REPEAT loops
general protection fault in fq_codel_enqueue (3) net	2	syz, C	inconclusive		5	1574d	1819d	22/29	1336d	fd1894224407 bpf: Don't redirect packets with invalid pkt_len
WARNING: bad unlock balance in rxrpc_do_sendmsg afs net	4	syz, C	inconclusive		14	1542d	1747d	22/29	1336d	b0f571ecd794 rxrpc: Fix locking in rxrpc's sendmsg
memory leak in tun_chr_open net	3	syz, C			1	1506d	1506d	22/29	1336d	1118b2049d77 net: tun: Fix memory leaks of napi_get_frags
general protection fault in udpv6_sendmsg net	2	syz, C	error		69	1433d	1442d	22/29	1336d	6423ac2eb31e rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket
KASAN: slab-out-of-bounds Read in decrypt_internal net	17	syz, C	inconclusive	done	4	1659d	1749d	22/29	1336d	9381fe8c849c net/tls: fix slab-out-of-bounds bug in decrypt_internal
WARNING in ipvlan_unregister_nf_hook net	-1	syz, C	done	done	4151	1785d	2421d	22/29	1494d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
general protection fault in sock_close net	2	syz	done	unreliable	2	2247d	2243d	20/29	1611d	77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in dev_change_net_namespace net	-1	syz	done	done	8	1797d	2445d	20/29	1617d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
WARNING in rtnl_dellink net	-1	syz, C	done	done	94	1744d	2255d	20/29	1624d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
INFO: task hung in linkwatch_event (2) net	1	syz, C	done	done	1033	1642d	2368d	20/29	1624d	563fbefed46a cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
general protection fault in xfrm_user_rcv_msg_compat net	2	syz, C	unreliable	done	1543	1904d	2116d	20/29	1624d	4e9505064f58 net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
KMSAN: kernel-infoleak in _copy_to_iter (6) net	9	syz, C			748	1689d	1778d	20/29	1689d	71ddeac8cd1d inet_diag: fix kernel-infoleak for UDP sockets
WARNING: ODEBUG bug in qdisc_create net	-1	syz, C	done		6	1858d	1886d	20/29	1689d	a56d447f196f net/sched: sch_taprio: properly cancel timer from taprio_destroy()
WARNING: suspicious RCU usage in xfrm_set_default net	4	syz, C	done		20	1852d	1857d	20/29	1689d	93ec1320b017 xfrm: fix rcu lock in xfrm_notify_userpolicy()
KASAN: null-ptr-deref Write in sock_setsockopt net	12	syz, C			45	1707d	1815d	20/29	1689d	d00c8ee31729 net: fix possible NULL deref in sock_reserve_memory
KASAN: use-after-free Read in netlbl_catmap_walk lsm net	19	syz, C	inconclusive		1	1884d	1884d	20/29	1689d	0817534ff9ea smackfs: Fix use-after-free in netlbl_catmap_walk()
general protection fault in bpf_skb_cgroup_id net bpf	2	syz, C	inconclusive		107	1846d	1861d	20/29	1689d	435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
general protection fault in inet_csk_accept net	2	syz, C	done		8	1779d	1778d	20/29	1689d	b0cdc5dbcf2b mptcp: never allow the PM to close a listener subflow
KASAN: invalid-free in packet_set_ring net	24	syz, C	inconclusive		4	1775d	1776d	20/29	1689d	ec6af094ea28 net/packet: rx_owner_map depends on pg_vec
general protection fault in bpf_skb_ancestor_cgroup_id net bpf	2	syz, C	unreliable		232	1845d	1861d	20/29	1689d	435b08ec0094 bpf, test, cgroup: Use sk_{alloc,free} for test cases
INFO: rcu detected stall in fq_pie_timer net	1	syz, C	error		35	1730d	1948d	20/29	1689d	61c2402665f1 net/sched: fq_pie: prevent dismantle issue
general protection fault in free_percpu net	2	syz	unreliable	done	80	1757d	2024d	20/29	1689d	158b515f703e tun: avoid double free in tun_free_netdev
WARNING: lock held when returning to user space in tcp_setsockopt (2) net	4	syz, C	done	done	6	1763d	1769d	20/29	1689d	b29fcfb54cd7 mptcp: full disconnect implementation
WARNING in tcf_chain0_head_change_cb_del (3) net	-1	syz, C	inconclusive		107	1773d	1908d	20/29	1689d	ab443c539167 sch_cake: do not call cake_destroy() from cake_init()
WARNING in nsim_dev_reload_destroy net	-1	syz, C	done		2895	1820d	1825d	20/29	1689d	fb9d19c2d844 Revert "devlink: Remove not-executed trap group notifications"
KASAN: use-after-free Read in free_netdev (2) net	19	syz, C	done	done	1715	1787d	2421d	20/29	1689d	f123cffdd8fe net: netlink: af_netlink: Prevent empty skb by adding a check on len.
UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len net	-1	syz, C	unreliable		5660	1848d	2145d	20/29	1689d	b193e15ac69d net: prevent user from passing illegal stab size
general protection fault in dev_get_by_index_rcu (2) bpf net	2	syz, C	error		18	1749d	1749d	20/29	1689d	382778edc826 xdp: check prog type before updating BPF link
WARNING in __dev_set_promiscuity net	-1	syz, C	done		11	1851d	1854d	20/29	1689d	a5b8fd657881 net: dev_addr_list: handle first address in __hw_addr_add_ex
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel net usb	5	syz, C	done		28	1765d	1779d	20/29	1689d	744451c162a5 Bluetooth: hci_sync: Push sync command cancellation to workqueue
BUG: sleeping function called from invalid context in tipc_crypto_start net	5	syz, C	done	done	6	1767d	1774d	20/29	1689d	f845fe5819ef Revert "tipc: use consistent GFP flags"
general protection fault in ref_tracker_alloc net	2	syz, C	done		679	1745d	1774d	20/29	1689d	0976b888a150 ethtool: fix null-ptr-deref on ref tracker
KMSAN: uninit-value in pneigh_fill_info net	7	syz, C			14	1777d	1781d	20/29	1689d	e195e9b5dee6 net, neigh: clear whole pneigh_entry at alloc time
general protection fault in nfc_alloc_send_skb net nfc	2	syz, C	done		2	1757d	1751d	20/29	1689d	dded08927ca3 nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
BUG: unable to handle kernel NULL pointer dereference in fifo_set_limit net	10	syz, C	error		1	1849d	1849d	20/29	1689d	560ee196fe9e net_sched: fix NULL deref in fifo_set_limit()
WARNING in rtnl_stats_get net	-1	syz, C	unreliable		31	1816d	2005d	20/29	1689d	0854a0513321 net: bridge: fix under estimation in br_get_linkxstats_size()
kernel BUG at net/phonet/socket.c:LINE! net	-1	syz, C	inconclusive		168	1766d	2387d	20/29	1689d	75a2f3152009 phonet/pep: refuse to enable an unbound pipe
KMSAN: uninit-value in fib_get_nhs net	7	syz, C			14	1707d	1778d	20/29	1689d	7a3429bace0e ipv4: Check attribute length for RTA_GATEWAY in multipath route
WARNING in sk_stream_kill_queues (7) net	-1	syz, C			6689	1690d	1808d	20/29	1689d	c4777efa751d net: add and use skb_unclone_keeptruesize() helper
KASAN: use-after-free Read in vlan_dev_real_dev (2) net	19	syz, C	error		7	1826d	1837d	20/29	1689d	563bcbae3ba2 net: vlan: fix a UAF in vlan_dev_real_dev()
UBSAN: shift-out-of-bounds in xfrm_get_default net	-1	syz, C	done		104	1841d	1879d	20/29	1689d	3c10ffddc61f net: xfrm: fix shift-out-of-bounds in xfrm_get_default
WARNING in ref_tracker_free net	-1	syz, C	done		14831	1747d	1774d	20/29	1689d	123e495ecc25 net: linkwatch: be more careful about dev->linkwatch_dev_tracker
WARNING in gnet_stats_add_basic net	-1	syz, C	done		14	1830d	1830d	20/29	1689d	e22db7bd552f net: sched: Allow statistics reads from softirq.
BUG: corrupted list in netif_napi_add net	8	syz	unreliable	done	17	1804d	1836d	20/29	1689d	0315a075f134 net: fix premature exit from NAPI state polling in napi_disable()
INFO: task can't die in __cond_resched net	1	syz, C	error		66	1804d	1858d	20/29	1689d	e9edc188fc76 netfilter: conntrack: serialize hash resizes and cleanups
BUG: unable to handle kernel NULL pointer dereference in unix_shutdown net	10	syz, C	unreliable		413	1886d	1888d	20/29	1732d	d359902d5c35 af_unix: Fix NULL pointer bug in unix_shutdown
KASAN: use-after-free Read in cipso_v4_genopt lsm net	19	syz, C	inconclusive		5	2059d	2061d	20/29	1808d	ad5d07f4a9cd cipso,calipso: resolve a number of problems with the DOI refcounts 1165affd4848 net: mac802154: Fix general protection fault
WARNING in idr_get_next arm-msm net	-1	syz, C	error	done	21	1999d	2243d	20/29	1808d	3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
KASAN: null-ptr-deref Read in phy_disconnect net usb	11	syz, C			255	1875d	1879d	20/29	1808d	1406e8cb4b05 net: usb: asix: do not call phy_disconnect() for ax88178
KMSAN: uninit-value in hsr_fill_frame_info net	7	syz, C			249	1925d	2223d	20/29	1808d	2e9f60932a2c net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
WARNING: refcount bug in ip6_tnl_dev_uninit net	13	syz, C	done		16	2031d	2036d	20/29	1808d	0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
memory leak in garp_request_join net	3	syz, C			414	1937d	2460d	20/29	1808d	42ca63f98084 net/802/garp: fix memleak in garp_request_join()
KMSAN: uninit-value in virtio_net_hdr_to_skb net	7	syz, C			325	1926d	1985d	20/29	1808d	61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
kernel BUG in llc_sap_action_send_xid_c net	-1	syz, C	error		61	1808d	2022d	20/29	1808d	c7c9d2102c9c net: llc: fix skb_over_panic
BUG: unable to handle kernel NULL pointer dereference in htb_select_queue net	10	syz	done		8	2039d	2053d	20/29	1808d	fb3a3e37de33 sch_htb: Fix offload cleanup in htb_destroy on htb_init failure 93bde210c434 sch_htb: Fix select_queue for non-offload mode
KASAN: use-after-free Write in sk_psock_stop bpf net	22	syz	done		74	2006d	2026d	20/29	1808d	aadb2bb83ff7 sock_map: Fix a potential use-after-free in sock_map_close()
INFO: rcu detected stall in wg_packet_tx_worker (3) net	1	syz, C	inconclusive		5	1894d	1876d	20/29	1808d	c7c5e6ff533f fq_codel: reject silly quantum parameters
WARNING: refcount bug in vti6_dev_uninit net	13	syz, C			26	2031d	2036d	20/29	1808d	0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
general protection fault in unix_dgram_connect net	2	syz, C	done		2	1882d	1882d	20/29	1808d	dc56ad7028c5 af_unix: fix potential NULL deref in unix_dgram_connect()
memory leak in xfrm_user_rcv_msg net	3	syz, C			1	1952d	1948d	20/29	1808d	7c1a80e80cde net: xfrm: fix memory leak in xfrm_user_rcv_msg
divide error in __tcp_select_window (2) net	2	syz, C	done		4	2022d	2023d	20/29	1808d	a7150e382267 Revert "tcp: Reset tcp connections in SYN-SENT state"
KMSAN: uninit-value in ip_rcv_core net	7	syz, C			141	1925d	2959d	20/29	1808d	6628ddfec758 net: geneve: check skb is large enough for IPv4/IPv6 header
WARNING in slave_kobj_release net	-1	syz, C	done		3	1986d	2074d	20/29	1808d	35d96e631860 bonding: init notify_work earlier to avoid uninitialized use
KASAN: use-after-free Read in eth_header_parse_protocol net	19	syz, C	done		1453	2006d	2052d	20/29	1808d	61431a5907fc net: ensure mac header is set in virtio_net_hdr_to_skb()
WARNING: refcount bug in ip6gre_tunnel_uninit net	13	syz, C	error		10	2033d	2036d	20/29	1808d	7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc net arm-msm	4	syz, C	done	done	544	1994d	2331d	20/29	1808d	3cbf7530a163 qrtr: Convert qrtr_ports from IDR to XArray
memory leak in qrtr_create arm-msm net	3	syz, C			3	1912d	2083d	20/29	1808d	52f3456a96c0 net: qrtr: fix memory leaks
memory leak in virtio_transport_send_pkt_info virt kvm net	3	syz, C			2	2019d	2082d	20/29	1808d	8432b8114957 vsock/virtio: free queued packets when closing socket
UBSAN: shift-out-of-bounds in choke_change (2) net	-1	syz, C	done		7	2023d	2038d	20/29	1808d	3a87571f0ffc sch_red: fix off-by-one checks in red_check_params()
UBSAN: shift-out-of-bounds in xprt_calc_majortimeo net nfs	-1	syz, C	unreliable		149	2009d	2137d	20/29	1808d	c09f11ef3595 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
INFO: rcu detected stall in tx net	1	syz, C	error	unreliable	3	1875d	2013d	20/29	1808d	30fad76ce4e9 USB: usbtmc: Fix RCU stall warning
general protection fault in kcm_sendmsg net	19	syz, C	done		7957	1942d	1963d	20/29	1808d	a47c397bb29f revert "net: kcm: fix memory leak in kcm_sendmsg"
WARNING in sk_stream_kill_queues (6) net	-1	syz, C			11376	1808d	2022d	20/29	1808d	144748eb0c44 bpf, sockmap: Fix incorrect fwd_alloc accounting
BUG: MAX_LOCKDEP_CHAINS too low! (2) net	-1	syz, C	error		84838	1808d	2284d	20/29	1808d	5dc33592e955 lockdep: Allow tuning tracing capacity constants.
memory leak in cfserl_create net	3	syz, C			13	2527d	2696d	20/29	1808d	b53558a950a8 net: caif: fix memory leak in caif_device_notify
memory leak in radix_tree_insert arm-msm net	3	syz, C			1	2033d	2032d	20/29	1808d	8a03dd925786 net: qrtr: Fix memory leak on qrtr_tx_wait failure
KASAN: use-after-free Read in nfc_llcp_put_ssap net nfc	19	syz	done		4	1993d	2001d	20/29	1808d	c61760e6940d net/nfc: fix use-after-free llcp_sock_bind/connect
WARNING: suspicious RCU usage in tcp_bpf_update_proto bpf net	4	syz, C	done		539	2006d	2026d	20/29	1808d	51e0158a5432 skmsg: Pass psock pointer to ->psock_update_sk_prot()
BUG: sleeping function called from invalid context in __ipv6_dev_mc_dec net	5	syz, C	done		21	1941d	1998d	20/29	1808d	a100243d95a6 rtnetlink: avoid RCU read lock when holding RTNL
WARNING: refcount bug in in_dev_finish_destroy net	13	syz, C	unreliable		463	1809d	2036d	20/29	1808d	0d7a7b2014b1 ipv6: remove extra dev_hold() for fallback tunnels
WARNING: suspicious RCU usage in vxlan_xmit net	4	syz, C	error		1	1950d	1950d	20/29	1808d	85e8b032d6eb vxlan: add missing rcu_read_lock() in neigh_reduce()
possible deadlock in br_ioctl_call net	4	syz, C	unreliable		4161	1899d	1909d	20/29	1808d	893b19587534 net: bridge: fix ioctl locking
BUG: sleeping function called from invalid context in _copy_to_iter net	5	syz, C	done		60	1894d	1901d	20/29	1808d	876c14ad014d af_unix: fix holding spinlock in oob handling
memory leak in tcindex_set_parms net	3	syz, C			94	1967d	2452d	20/29	1808d	f5051bcece50 net: sched: fix memory leak in tcindex_partial_destroy_work
general protection fault in sock_from_file net io-uring	2	syz, C	inconclusive		78	1872d	1879d	20/29	1808d	c6d3d9cbd659 io_uring: fix queueing half-created requests
WARNING: ODEBUG bug in net_dm_cmd_trace net	-1	syz	unreliable		2	2059d	2055d	20/29	1808d	9398e9c0b1d4 drop_monitor: Perform cleanup upon probe registration failure
WARNING in xfrm_alloc_compat (2) net	-1	syz, C	done		47	2023d	2033d	20/29	1808d	ef19e111337f xfrm/compat: Cleanup WARN()s that can be user-triggered
KMSAN: uninit-value in caif_seqpkt_sendmsg net	7	syz, C			2365	1855d	2271d	20/29	1808d	991e634360f2 net: fix uninit-value in caif_seqpkt_sendmsg
memory leak in mrp_request_join net	3	syz, C			215	1948d	2466d	20/29	1808d	996af62167d0 net/802/mrp: fix memleak in mrp_request_join()
memory leak in tcp_cdg_init net	3	syz			6	1973d	2112d	20/29	1808d	be5d1b61a2ad tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
WARNING: refcount bug in sk_psock_get net	13	syz, C	done		8	1995d	2022d	20/29	1808d	8621436671f3 smc: disallow TCP_ULP in smc_setsockopt()
WARNING: refcount bug in ipip6_tunnel_uninit net	13	syz, C	done		199	2030d	2036d	20/29	1808d	6289a98f0817 sit: proper dev_{hold|put} in ndo_[un]init methods
WARNING: refcount bug in register_netdevice net	13	syz, C	unreliable		97	2029d	2036d	20/29	1808d	7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
WARNING: refcount bug in ip6erspan_tunnel_uninit net	13	syz, C	error		11	2033d	2035d	20/29	1808d	7f700334be9a ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
UBSAN: shift-out-of-bounds in xfrm_set_default net	-1	syz, C	unreliable		79	1903d	1913d	20/29	1808d	5d8dbb7fb82b net: xfrm: fix shift-out-of-bounce
KMSAN: kernel-infoleak in _copy_to_iter (5) net	9	syz, C			23883	1917d	2353d	20/29	1808d	08c27f3322fe batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
KMSAN: uninit-value in __dev_mc_add net	7	syz, C			213	2752d	2948d	20/29	1808d	cca8ea3b05c9 net: tun: set tun->dev->addr_len during TUNSETLINK processing
memory leak in kcm_sendmsg net	3	syz, C			2	2304d	2443d	20/29	1808d	c47cc304990a net: kcm: fix memory leak in kcm_sendmsg
UBSAN: shift-out-of-bounds in qdisc_get_rtab net	-1	syz, C	unreliable	done	521	2101d	2145d	20/29	1956d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
memory leak in qrtr_tun_open arm-msm net	3	syz, C			4	2114d	2158d	20/29	2022d	fc0494ead639 net: qrtr: Fix memory leak in qrtr_tun_open
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy net	11	syz, C			115	2025d	2216d	20/29	2022d	396d7f23adf9 net: sched: fix police ext initialization
INFO: task hung in tcf_action_init_1 net	1	syz, C	done		30	2082d	2216d	20/29	2022d	d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
KASAN: slab-out-of-bounds Read in skb_segment net	17	syz, C	error		311	2101d	2105d	20/29	2022d	00b229f762b0 net: fix GSO for SG-enabled devices
INFO: task can't die in connmark_exit_net net	1	syz	error		1	2145d	2141d	20/29	2022d	d349f9976868 net_sched: fix RTNL deadlock again caused by request_module()
WARNING in __alloc_skb arm-msm net	-1	syz, C	error		24	2053d	2065d	20/29	2022d	093b036aa94e net/qrtr: fix __netdev_alloc_skb call
WARNING in sk_stream_kill_queues (5) net	-1	syz, C	done		4684	2022d	2153d	20/29	2022d	097b9146c0e2 net: fix up truesize of cloned skb in skb_prepare_for_shift()
WARNING in dst_release net	-1	syz	done		2	2074d	2073d	20/29	2022d	e0be4931f3fe mptcp: reset last_snd on subflow close
KASAN: use-after-free Read in skb_segment net	19	syz, C	error		55	2101d	2105d	20/29	2022d	00b229f762b0 net: fix GSO for SG-enabled devices
UBSAN: shift-out-of-bounds in tcf_police_init net	-1	syz, C	unreliable		8	2102d	2139d	20/29	2052d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
UBSAN: shift-out-of-bounds in est_timer net	-1	syz, C	unreliable		73	2061d	2136d	20/29	2052d	dd5e073381f2 net_sched: gen_estimator: support large ewma log
memory leak in xskq_create bpf net	3	syz, C			7	2119d	2139d	19/29	2053d	8bee68338408 xsk: Fix memory leak for failed bind
UBSAN: shift-out-of-bounds in __detect_linklayer net	-1	syz, C	unreliable	done	31	2101d	2107d	19/29	2053d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
UBSAN: shift-out-of-bounds in tcindex_set_parms net	-1	syz, C	unreliable	done	45	2101d	2136d	19/29	2053d	bcd0cf19ef82 net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
general protection fault in taprio_dequeue_soft net	2	syz, C	done		2	2138d	2138d	19/29	2053d	44d4775ca518 net/sched: sch_taprio: reset child qdiscs before freeing them
kernel BUG at net/core/dev.c:NUM! net	-1	syz, C	done		35	2107d	2109d	19/29	2053d	47e4bb147a96 net: sit: unregister_netdevice on newlink's error path
KASAN: use-after-free Read in decode_session6 net	19	syz, C	done		152	2099d	2307d	19/29	2053d	0356010d825e sctp: bring inet(6)_skb_parm back to sctp_input_cb
divide error in __tcp_select_window net	2	syz, C	done		1119	2157d	2162d	19/29	2053d	fd8976790a6c mptcp: be careful on MPTCP-level ack.
UBSAN: shift-out-of-bounds in choke_enqueue net	-1	syz, C	inconclusive		3853	2053d	2145d	19/29	2053d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
WARNING: suspicious RCU usage in tcp_disconnect net	4	syz, C	done		25	2107d	2109d	19/29	2053d	13a9499e8333 mptcp: fix locking in mptcp_disconnect()
KMSAN: uninit-value in __nla_validate_parse (2) net	7	syz, C			2	2114d	2110d	19/29	2053d	c96adff95619 cls_flower: call nla_ok() before nla_next()
general protection fault in xsk_recvmsg bpf net	2	syz, C	done	unreliable	1800	2138d	2107d	19/29	2053d	3546b9b8eced xsk: Validate socket state in xsk_recvmsg, prior touching socket members
UBSAN: shift-out-of-bounds in sfq_init net	-1	syz, C	unreliable		8	2116d	2130d	19/29	2053d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KMSAN: uninit-value in gre_parse_header net	7	syz, C			9283	2081d	2679d	19/29	2053d	085c7c4e1c0e erspan: fix version 1 check in gre_parse_header()
UBSAN: shift-out-of-bounds in red_adaptative_timer net	-1	syz, C	unreliable		260	2053d	2145d	19/29	2053d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KASAN: slab-out-of-bounds Write in xfrm_attr_cpy32 net	21	syz, C	done		106	2143d	2191d	19/29	2053d	d1949d045fd6 xfrm/compat: memset(0) 64-bit padding at right place
UBSAN: shift-out-of-bounds in __red_change net	-1	syz, C	unreliable		24	2056d	2144d	19/29	2053d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
UBSAN: shift-out-of-bounds in gred_change net	-1	syz, C	unreliable		5	2067d	2121d	19/29	2053d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
memory leak in rxrpc_lookup_local net afs	3	syz, C			1415	2093d	2557d	19/29	2053d	b8323f7288ab rxrpc: Fix memory leak in rxrpc_lookup_local
WARNING in xfrm_alloc_compat net	-1	syz, C	done		130	2065d	2187d	19/29	2053d	dbd7ae5154d5 xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
UBSAN: shift-out-of-bounds in red_enqueue net	-1	syz, C	unreliable		4906	2053d	2145d	19/29	2053d	bd1248f1ddbc net: sched: prevent invalid Scell_log shift count
KMSAN: kernel-infoleak in move_addr_to_user (4) net	9	syz, C			59	2060d	2112d	19/29	2053d	b42b3a2744b3 can: isotp: isotp_getname(): fix kernel information leak
UBSAN: shift-out-of-bounds in strset_parse_request net	-1	syz, C	done		16	2116d	2140d	19/29	2053d	efb796f5571f ethtool: fix string set id check
UBSAN: shift-out-of-bounds in cbq_dequeue net	-1	syz, C	unreliable		27	2101d	2145d	19/29	2053d	e4bedf48aaa5 net_sched: reject silly cell_log in qdisc_get_rtab()
KASAN: stack-out-of-bounds Write in bitmap_from_arr32 net	21	syz, C	done		2	2156d	2152d	19/29	2053d	a770bf515613 ethtool: fix stack overflow in ethnl_parse_bitset()
KASAN: use-after-free Read in dump_schedule net	19	syz, C	done	done	7	2130d	2240d	19/29	2053d	cc00bcaa5899 netfilter: x_tables: Switch synchronization to RCU
KASAN: use-after-free Read in eth_type_trans net	19	syz, C	done	error	3	2353d	2495d	15/29	2130d	96aa1b22bd6b tun: correct header offsets in napi frags mode
BUG: MAX_LOCKDEP_KEYS too low! net	-1	syz, C	done	error	3496	2309d	2553d	15/29	2143d	1a33e10e4a95 net: partially revert dynamic lockdep key changes
general protection fault in xsk_release bpf net	2	syz, C	done		2	2219d	2218d	15/29	2166d	1fd17c8cd0aa xsk: Fix possible crash in socket_release when out-of-memory
KASAN: use-after-free Write in tcindex_change net	22	syz, C	done	done	4	2409d	2410d	15/29	2166d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
possible deadlock in cleanup_net net	4	syz, C	done		281	2235d	2243d	15/29	2166d	d966ddcc3821 tipc: fix a deadlock when flushing scheduled work
KMSAN: uninit-value in ip_tunnel_xmit (2) net	7	syz, C			11778	2171d	2995d	15/29	2166d	fdafed459998 ip_gre: set dev->hard_header_len and dev->needed_headroom properly
INFO: rcu detected stall in ip_list_rcv net	1	syz, C	error	done	3	2214d	2240d	15/29	2166d	1d0e850a49a5 afs: Fix cell removal
general protection fault in tcf_generic_walker net	2	syz			9	2213d	2216d	15/29	2166d	580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
KMSAN: uninit-value in unix_find_other net	7	syz, C			57	2211d	3028d	15/29	2166d	7ca1db21ef8e net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
INFO: task hung in ctrl_getfamily net	1	syz	done	done	22	2260d	2873d	15/29	2166d	47733f9daf4f tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
WARNING: suspicious RCU usage in qrtr_ns_worker arm-msm net	4	syz, C	done		1	2248d	2311d	15/29	2166d	a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
WARNING in rxrpc_recvmsg afs net	-1	syz, C	error	done	5	2302d	2302d	15/29	2166d	65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
KASAN: use-after-free Read in tcf_action_init net	19	syz, C	done		1	2218d	2216d	15/29	2166d	0fedc63fadf0 net_sched: commit action insertions together
KASAN: slab-out-of-bounds Read in strset_parse_request net	17	syz, C	error		141	2205d	2205d	15/29	2166d	db972e532518 ethtool: strset: allow ETHTOOL_A_STRSET_COUNTS_ONLY attr
BUG: unable to handle kernel paging request in tcf_action_dump_terse net	8	syz, C	done		15	2210d	2216d	15/29	2166d	580e4273d7a8 net_sched: check error pointer in tcf_dump_walker()
INFO: task hung in lock_sock_nested (3) net	1	syz, C	done		5	2210d	2211d	15/29	2166d	d9fb8c507d42 mptcp: fix infinite loop on recvmsg()/worker() race.
kernel BUG at net/rxrpc/conn_object.c:LINE! net afs	-1	syz, C	done		855	2169d	2234d	15/29	2166d	546a42410bf7 rxrpc: Fix conn bundle leak in net-namespace exit
possible deadlock in dev_uc_sync net	4	syz, C	done		3	2202d	2299d	15/29	2166d	0e8b8d6a2d85 net: core: use list_del_init() instead of list_del() in netdev_run_todo()
general protection fault in rt6_fill_node net	2	syz, C	done	done	3	2251d	2248d	15/29	2166d	eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
memory leak in __team_options_register net	3	syz, C			1	2236d	2236d	15/29	2166d	9a9e77495958 net: team: fix memory leak in __team_options_register
general protection fault in nexthop_is_blackhole net	2	syz, C	done	done	1	2251d	2248d	15/29	2166d	eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KASAN: use-after-free Write in xp_put_pool bpf net	22	syz, C	done		50	2220d	2242d	15/29	2166d	83cf5c68d663 xsk: Fix use-after-free in failed shared_umem bind
WARNING in nla_get_range_unsigned net	-1	syz, C	done		63	2242d	2243d	15/29	2166d	c30a3c957c88 netlink: policy: correct validation type check
general protection fault in xsk_is_setup_for_bpf_map net bpf	2	syz, C	error		294	2219d	2242d	15/29	2166d	968be23ceaca xsk: Fix possible segfault at xskmap entry insertion
inconsistent lock state in icmp_send net	4	syz	done	done	1	2374d	2872d	15/29	2166d	1378817486d6 tipc: block BH before using dst_cache
KASAN: use-after-free Write in rxrpc_put_bundle afs net	22	syz, C	done		229	2204d	2228d	15/29	2166d	f3af4ad1e08a rxrpc: Fix bundle counting for exclusive connections
KASAN: use-after-free Read in tcf_action_destroy net	19	syz, C	done		8	2208d	2223d	15/29	2166d	0fedc63fadf0 net_sched: commit action insertions together
memory leak in xdp_umem_create bpf net	3	syz, C			17	2170d	2190d	15/29	2166d	e5e1a4bc916d xsk: Fix possible memory leak at socket close
general protection fault in xsk_diag_dump (2) bpf net	2	syz, C			354	2223d	2242d	15/29	2166d	53ea2076d851 xsk: Fix possible segfault in xsk umem diagnostics
general protection fault in tcf_action_destroy (2) net	2	syz, C	done	done	29	2204d	2417d	15/29	2166d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
WARNING: suspicious RCU usage in ctrl_cmd_new_lookup net arm-msm	4	syz, C	done	done	10	2222d	2311d	15/29	2166d	a7809ff90ce6 net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
KMSAN: uninit-value in __inet_diag_dump net	7	syz, C			37	2206d	2223d	15/29	2204d	d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
INFO: task hung in tcf_ife_init net	1	syz, C	done		4	2236d	2241d	15/29	2204d	cc8e58f8325c act_ife: load meta modules before tcf_idr_check_alloc()
KMSAN: uninit-value in inet_diag_cmd_exact net	7	syz, C			31	2205d	2217d	15/29	2204d	d5e4d0a5e692 inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
general protection fault in free_netdev net	2	syz, C	error	done	3605	2280d	2314d	15/29	2212d	46ef5b89ec0e ip6_gre: fix null-ptr-deref in ip6gre_init_net()
KMSAN: kernel-infoleak in move_addr_to_user (3) net	9	syz, C			79	2227d	2261d	15/29	2216d	38ba8b9241f5 can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
WARNING: refcount bug in red_destroy net	13	syz, C	done		1	2250d	2248d	15/29	2219d	5438dd45831e net_sched: fix error path in red_init()
WARNING: refcount bug in qdisc_put (2) net	13	syz, C	done		7	2249d	2248d	15/29	2219d	5438dd45831e net_sched: fix error path in red_init()
KASAN: use-after-free Write in __linkwatch_run_queue net	22	syz, C	error		24	2282d	2283d	15/29	2227d	c75d1d5248c0 bonding: check return value of register_netdevice() in bond_newlink()
KASAN: use-after-free Read in sock_def_write_space (2) arm-msm net	19	syz, C	error		29	2228d	2285d	15/29	2227d	af9f691f0f5b qrtr: orphan socket in qrtr_release()
kernel BUG at net/rxrpc/recvmsg.c:LINE! afs net	-1	syz, C	error		10	2274d	2302d	15/29	2227d	65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
WARNING in idr_alloc arm-msm net	-1	syz, C	done		65	2236d	2311d	15/29	2227d	8dfddfb79653 net: qrtr: fix usage of idr in port assignment to socket
general protection fault in fib_dump_info (2) net	2	syz, C	done		16	2251d	2253d	15/29	2227d	eeaac3634ee0 net: nexthop: don't allow empty NHA_GROUP
KMSAN: uninit-value in netlink_policy_dump_start net	7	syz, C			31	2232d	2236d	15/29	2227d	d1fb55592909 netlink: fix state reallocation in policy export
KASAN: use-after-free Read in devlink_health_reporter_destroy net	19	syz, C	error		1188	2291d	2292d	15/29	2227d	5d037b4d3df7 devlink: Fix use-after-free when destroying health reporters
kernel BUG at net/core/dev.c:LINE! (3) net	-1	syz, C	done		979	2242d	2386d	15/29	2227d	832707021666 bonding: fix a potential double-unregister
general protection fault in vsock_poll net virt	2	syz	done		15	2272d	2284d	15/29	2227d	1980c0584483 vsock: fix potential null pointer dereference in vsock_poll()
KMSAN: uninit-value in geneve_xmit net	7	syz, C			163	2231d	2284d	15/29	2227d	32818c075c54 geneve: fix an uninitialized value in geneve_changelink()
KASAN: use-after-free Read in __xfrm6_tunnel_spi_lookup net	19	syz, C	error		12	2286d	2290d	15/29	2227d	8b404f46dd6a xfrm: interface: not xfrmi_ipv6/ipip_handler twice
INFO: trying to register non-static key in red_destroy net	-1	syz, C	error		318	2279d	2301d	15/29	2227d	608b4adab178 net_sched: initialize timer earlier in red_init()
KASAN: wild-memory-access Read in ip_setsockopt net	17	syz, C			2	2261d	2261d	15/29	2227d	519a8a6cf91d net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
possible deadlock in dev_mc_unsync net	4	syz, C	error	done	78	2294d	2309d	15/29	2256d	be74294ffa24 net: get rid of lockdep_set_class_and_subclass()
WARNING: locking bug in try_to_grab_pending net	4	syz	error	done	1	2346d	2808d	15/29	2256d	1378817486d6 tipc: block BH before using dst_cache
general protection fault in qrtr_endpoint_post net arm-msm	2	syz, C	done	done	54	2294d	2312d	15/29	2263d	8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
WARNING in xfrm_policy_insert net	-1	syz, C	inconclusive	done	6	2320d	3173d	15/29	2277d	ed17b8d377ea xfrm: fix a warning in xfrm_policy_insert_list
KASAN: use-after-free Read in sock_def_write_space arm-msm net	19	syz, C	done		67	2286d	2651d	15/29	2286d	a9b111016235 llc: make sure applications use ARPHRD_ETHER
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post arm-msm net	17	syz, C			8	2308d	2309d	15/29	2286d	8ff41cc21714 net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
memory leak in qdisc_create_dflt net	3	syz, C			1	2305d	2301d	15/29	2286d	306381aec7c2 net_sched: fix a memory leak in atm_tc_init()
WARNING in hsr_dev_finalize net	-1	syz, C	error		1546	2294d	2309d	15/29	2286d	ccfc9df1352b hsr: fix interface leak in error path of hsr_dev_finalize()
kernel BUG at net/l2tp/l2tp_core.c:LINE! net	-1	syz, C			10	2310d	2306d	15/29	2286d	c9a368f1c0fb bpf: net: Avoid incorrect bpf_sk_reuseport_detach call
KASAN: use-after-free Read in devlink_get_from_attrs net	19	syz, C			25	2294d	2306d	15/29	2286d	bf64ff4c2aac genetlink: get rid of family->attrbuf
KASAN: use-after-free Read in ip_icmp_error net	19	syz, C	done		14	2340d	2341d	15/29	2288d	239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
KASAN: slab-out-of-bounds Read in ip_icmp_error net	17	syz, C	done		13	2340d	2340d	15/29	2288d	239174945dac tcp: tcp_v4_err() icmp skb is named icmp_skb
WARNING: proc registration bug in snmp6_register_dev net	-1	syz, C	done		14	2316d	2382d	15/29	2288d	de0083c7ed7d hsr: avoid to create proc file after unregister
KASAN: use-after-free Read in inet_diag_bc_sk net	19	syz, C	done		30	2363d	2366d	15/29	2288d	ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
general protection fault in fq_codel_enqueue net	2	syz, C	done		25	2293d	2378d	15/29	2288d	9274124f023b net: stricter validation of untrusted gso packets
general protection fault in put_cmsg net	2	syz, C	done		3	2354d	2354d	15/29	2288d	1b2f08df0a88 ipv6: set msg_control_is_user in do_ipv6_getsockopt
KASAN: slab-out-of-bounds Read in inet_diag_bc_sk net	17	syz, C	done		45	2363d	2366d	15/29	2288d	ee1bd483cc06 inet_diag: bc: read cgroup id only for full sockets
general protection fault in erspan_validate net	2	syz, C	done		520	2354d	2361d	15/29	2288d	51fa960d3b51 erspan: Check IFLA_GRE_ERSPAN_VER is set.
general protection fault in inet_unhash net	2	syz, C	done		40	2310d	2338d	15/29	2288d	02c71b144c81 l2tp: do not use inet_hash()/inet_unhash()
KASAN: use-after-free Read in rpc_net_ns net nfs	19	syz	done		10	2354d	2360d	15/29	2288d	31e9a7f35352 SUNRPC: fix use-after-free in rpc_free_client_work()
memory leak in genl_rcv_msg net	3	syz, C			116	2324d	2514d	15/29	2288d	c36f05559104 genetlink: fix memory leaks in genl_family_rcv_msg_dumpit()
KASAN: slab-out-of-bounds Read in fl6_update_dst net	17	syz, C	done		43	2310d	2355d	15/29	2288d	bb986a50421a seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds
KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen net	17	syz, C	done		4	2358d	2378d	15/29	2288d	9274124f023b net: stricter validation of untrusted gso packets
WARNING: locking bug in dev_mc_seq_show net	4	syz, C	done		3	2329d	2340d	15/29	2288d	845e0ebb4408 net: change addr_list_lock back to static key
KMSAN: uninit-value in skbprio_enqueue net	7	syz			11	2303d	2366d	15/29	2288d	2761121af87d net_sched: sch_skbprio: add message validation to skbprio_change()
INFO: rcu detected stall in wg_packet_tx_worker net	1	syz, C	done		24	2317d	2370d	15/29	2288d	df4953e4e997 sch_sfq: validate silly quantum values
WARNING in sk_stream_kill_queues (4) net	-1	syz, C	done	done	6	2428d	2432d	15/29	2305d	b6f6118901d1 ipv6: restrict IPV6_ADDRFORM operation
WARNING in kfree (2) net	-1	syz	done	done	1	2418d	2417d	15/29	2307d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Write in tcindex_set_parms net	22	syz, C	done		13	2397d	2417d	15/29	2357d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
KASAN: use-after-free Read in tcindex_dump net	19	syz			1	2419d	2417d	15/29	2357d	b1be2e8cd290 net_sched: hold rtnl lock in tcindex_partial_destroy_work()
general protection fault in macsec_upd_offload net	2	syz, C	done		5	2395d	2394d	15/29	2357d	aa81700cf232 macsec: fix NULL dereference in macsec_upd_offload()
WARNING in geneve_exit_batch_net (2) net	-1	syz, C	done		9	2404d	2428d	15/29	2357d	0fda7600c2e1 geneve: move debug check after netdev unregister
KASAN: invalid-free in tcf_exts_destroy net	24	syz, C	done		1	2420d	2419d	15/29	2357d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
general protection fault in do_tcp_getsockopt (2) net	2	syz, C	done		1	2409d	2409d	15/29	2357d	6cd6cbf593bf net-backports: tcp: repair: fix TCP_QUEUE_SEQ implementation
WARNING: refcount bug in __tcf_action_put net	13	syz			1	2418d	2417d	15/29	2357d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
general protection fault in ethnl_parse_header net	2	syz, C	done		9	2404d	2408d	15/29	2357d	55b474c41e58 netlink: check for null extack in cookie helpers
WARNING: ODEBUG bug in __init_work net	-1	syz	done		1	2405d	2404d	15/29	2357d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING in call_rcu net	-1	syz, C	done		8	2410d	2417d	15/29	2357d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
WARNING: ODEBUG bug in tcf_queue_work net	-1	syz, C	done		30	2422d	2422d	15/29	2357d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
general protection fault in qdisc_hash_add net	2	syz, C	done		47	2415d	2416d	15/29	2357d	7c4046b1c53b Revert "net: sched: make newly activated qdiscs visible"
WARNING: refcount bug in tcindex_data_put net	13	syz, C	done		27	2393d	2394d	15/29	2357d	a8eab6d35e22 net_sched: fix a missing refcnt in tcindex_init()
KASAN: use-after-free Read in route4_get net	19	syz, C			8	2385d	2415d	15/29	2357d	ef299cc3fa1a net_sched: cls_route: remove the right filter from hashtable
general protection fault in erspan_netlink_parms net	2	syz, C	done		5	2412d	2412d	15/29	2357d	32ca98feab8c net: ip_gre: Accept IFLA_INFO_DATA-less configuration
KMSAN: uninit-value in tcf_exts_change net	7	syz, C			5	2408d	2417d	15/29	2357d	0d1c3530e1bd net_sched: keep alloc_hash updated after hash allocation
BUG: sleeping function called from invalid context in kmem_cache_alloc_node_trace net	5	syz, C	done		364	2418d	2420d	15/29	2357d	138470a9b2cc net/sched: act_ct: fix lockdep splat in tcf_ct_flow_table_get
WARNING: ODEBUG bug in tcindex_destroy_work (3) net	-1	syz	done		13	2396d	2432d	15/29	2357d	304e024216a8 net_sched: add a temporary refcnt for struct tcindex_data
WARNING: refcount bug in igmp_start_timer net	13	syz	done	done	19	2622d	2987d	15/29	2379d	323ebb61e32b net: use listified RX for handling GRO_NORMAL skbs
possible deadlock in sch_direct_xmit net	4	syz, C	done	done	1548	2523d	3201d	15/29	2379d	323ebb61e32b net: use listified RX for handling GRO_NORMAL skbs
KMSAN: uninit-value in __iptunnel_pull_header net	7	syz, C			12	2413d	2421d	15/29	2381d	17c25cafd4d3 gre: fix uninit-value in __iptunnel_pull_header
KMSAN: uninit-value in slhc_compress net	7	syz, C			3	2424d	2424d	15/29	2381d	110a40dfb708 slip: make slhc_compress() more robust against malicious packets
BUG: unable to handle kernel NULL pointer dereference in inet_release net	10	syz			3	2431d	2432d	15/29	2381d	b6f6118901d1 ipv6: restrict IPV6_ADDRFORM operation
BUG: unable to handle kernel paging request in ethnl_update_bitset32 net	8	syz, C			168	2421d	2433d	15/29	2381d	e34f1753eebc ethtool: limit bitset size
KMSAN: use-after-free in find_match net	18	syz, C			52	2412d	2441d	15/29	2381d	e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
KMSAN: uninit-value in bond_alb_xmit net	7	syz			3	2422d	2424d	15/29	2381d	b7469e83d2ad bonding/alb: make sure arp header is pulled before accessing it
KMSAN: use-after-free in ip6_dst_destroy net	18	syz, C			2	2414d	2426d	15/29	2381d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
possible deadlock in inet_csk_accept net	4	syz, C	done		992	2416d	2417d	15/29	2381d	06669ea346e4 net: memcg: fix lockdep splat in inet_csk_accept()
KASAN: slab-out-of-bounds Read in ethnl_update_bitset32 net	17	syz			2	2427d	2433d	15/29	2381d	e34f1753eebc ethtool: limit bitset size
possible deadlock in bond_get_stats (3) net	4	syz	done		2	2436d	2436d	15/29	2381d	b3e80d44f5b1 bonding: fix lockdep warning in bond_get_stats()
KMSAN: uninit-value in kstrdup net	7	syz, C			8	2417d	2444d	15/29	2381d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: use-after-free Read in ethnl_update_bitset32 net	19	syz, C	done		6	2425d	2433d	15/29	2381d	e34f1753eebc ethtool: limit bitset size
KASAN: use-after-free Read in ip6_dst_destroy net	19	syz, C	done		1	2441d	2441d	15/29	2381d	44bfa9c5e5f0 net: rtnetlink: fix bugs in rtnl_alt_ifname()
KASAN: use-after-free Read in l3mdev_master_ifindex_rcu net	19	syz, C	done	done	13	2437d	2443d	15/29	2381d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
kernel panic: stack is corrupted in vhost_net_ioctl kvm net virt	2	syz, C	done		2	2441d	2528d	15/29	2381d	42d84c8490f9 vhost: Check docket sk_family instead of call getname
BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr lsm net	10	syz, C	done		8	2422d	2432d	15/29	2381d	dc24f8b4ecd3 mptcp: add dummy icsk_sync_mss()
INFO: task hung in lock_sock_nested (2) net virt kvm	1	syz, C	done		418	2421d	2434d	15/29	2381d	3f74957fcbea vsock: fix potential deadlock in transport->release()
KMSAN: use-after-free in l3mdev_master_ifindex_rcu net	18	syz, C			5	2412d	2435d	15/29	2381d	e08ad80551b4 net: add strict checks in netdev_name_node_alt_destroy()
KASAN: use-after-free Read in mld_in_v1_mode net	19	syz, C	done		3	2440d	2443d	15/29	2381d	e08ad80551b4 net-backports: net: add strict checks in netdev_name_node_alt_destroy()
BUG: unable to handle kernel paging request in slhc_free net	8	syz, C	done	done	177	2737d	2855d	15/29	2416d	baf76f0c58ae slip: make slhc_free() silently accept an error pointer
KMSAN: uninit-value in setup_udp_tunnel_sock net	7	syz, C			1	2467d	2467d	15/29	2438d	940ba1498665 net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
KMSAN: uninit-value in rsvp_change net	7	syz, C			4	2459d	2460d	15/29	2438d	cb3c0e6bdf64 cls_rsvp: fix rsvp_policy
INFO: rcu detected stall in addrconf_rs_timer (3) net	1	syz, C	inconclusive	done	81	2499d	2495d	15/29	2438d	d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (2) net	21	syz, C	done		8	2465d	2467d	15/29	2438d	940ba1498665 net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
BUG: sleeping function called from invalid context in lock_sock_nested net bpf	5	syz, C			1232	2438d	2514d	15/29	2438d	37f96694cf73 crypto: af_alg - Use bh_lock_sock in sk_destruct
memory leak in vlan_dev_set_egress_priority net	3	syz, C			1	2481d	2481d	15/29	2438d	9bbd917e0bec vlan: fix memory leak in vlan_dev_set_egress_priority
KMSAN: uninit-value in macvlan_broadcast net	7	syz, C			2	2481d	2481d	15/29	2438d	96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING in tcp_ack net	-1	syz, C	done		3	2479d	2480d	15/29	2438d	90d72256addf gtp: fix bad unlock balance in gtp_encap_enable_socket
memory leak in em_nbyte_change net	3	syz, C			1	2463d	2463d	15/29	2438d	55cd9f67f1e4 net_sched: ematch: reject invalid TCF_EM_SIMPLE
KASAN: slab-out-of-bounds Read in macvlan_broadcast net	17	syz, C	done		10	2479d	2481d	15/29	2438d	96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
KASAN: slab-out-of-bounds Read in nla_put_nohdr net	17	syz, C	done		1	2466d	2466d	15/29	2438d	61678d28d4a4 net_sched: fix datalen for ematch
KASAN: use-after-free Read in tcp_fastretrans_alert net	19	syz, C	done		1	2469d	2469d	15/29	2438d	2bec445f9bf3 net-backports: tcp: do not leave dangling pointers in tp->highest_sack
BUG: unable to handle kernel paging request in rhashtable_jhash2 net	8	syz, C	done		6	2471d	2472d	15/29	2438d	41cdc741048b netdevsim: fix nsim_fib6_rt_create() error path
memory leak in tcf_ctinfo_init net	3	syz, C			2	2468d	2469d	15/29	2438d	09d4f10a5e78 net: sched: act_ctinfo: fix memory leak
KASAN: slab-out-of-bounds Read in __nla_put_nohdr net	17	syz, C	done		4	2466d	2466d	15/29	2438d	61678d28d4a4 net_sched: fix datalen for ematch
INFO: rcu detected stall in br_handle_frame (2) net	1	syz, C	done		2	2498d	2494d	15/29	2438d	d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
INFO: rcu detected stall in netlink_sendmsg (3) net	1	syz, C	done		6	2446d	2499d	15/29	2438d	d9e15a273306 pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
WARNING in cbq_destroy_class net	-1	syz, C	done		7	2443d	2466d	15/29	2438d	2e24cd755552 net_sched: fix ops->bind_class() implementations
WARNING in cbq_destroy net	-1	syz, C	done		1	2466d	2466d	15/29	2438d	2e24cd755552 net_sched: fix ops->bind_class() implementations
KASAN: use-after-free Read in tcp_check_sack_reordering net	19	syz, C	done		2	2461d	2470d	15/29	2438d	2bec445f9bf3 net-backports: tcp: do not leave dangling pointers in tp->highest_sack
KASAN: use-after-free Read in macvlan_broadcast net	19	syz, C	done		12	2479d	2481d	15/29	2438d	96cc4b69581d macvlan: do not assume mac_header is set in macvlan_broadcast()
WARNING: bad unlock balance in gtp_encap_enable_socket net	4	syz, C	done		8	2478d	2482d	15/29	2438d	90d72256addf net-backports: gtp: fix bad unlock balance in gtp_encap_enable_socket
WARNING: bad unlock balance in sch_direct_xmit net	4	syz, C	done		35	2469d	2515d	15/29	2438d	53d374979ef1 net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()
general protection fault in inet6_set_link_af net	2	syz, C	done		8	2448d	2452d	15/29	2438d	db3fa271022d ipv6/addrconf: fix potential NULL deref in inet6_set_link_af()
general protection fault in tcf_ife_cleanup net	2	syz, C	done		111	2453d	2477d	15/29	2438d	44c23d71599f net/sched: act_ife: initalize ife->metalist earlier
KASAN: use-after-free Write in __alloc_skb (2) net	22	syz, C	done		7	2489d	2506d	15/29	2438d	d836f5c69d87 net-backports: net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
KASAN: slab-out-of-bounds Read in tcf_exts_destroy net	17	syz, C	done	error	8	2561d	2464d	15/29	2438d	599be01ee567 net_sched: fix an OOB access in cls_tcindex
inconsistent lock state in rxrpc_put_client_connection_id afs net	4	syz, C	done		473	2447d	2453d	15/29	2438d	963485d436cc rxrpc: Fix call RCU cleanup using non-bh-safe locks
KASAN: null-ptr-deref Read in tcf_generic_walker net	11	syz, C	done		6	2442d	2461d	15/29	2438d	760d228e322e net_sched: walk through all child classes in tc_bind_tclass()
WARNING in tcp_enter_loss (2) net	-1	syz, C	done	unreliable	4	3096d	3146d	15/29	2439d	16ae6aa17052 tcp: ignore Fast Open on repair mode
KASAN: slab-out-of-bounds Read in hsr_debugfs_rename net	17	syz, C	done		18	2482d	2491d	15/29	2443d	04b69426d846 hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename()
kernel BUG at include/linux/mm.h:LINE! (5) net	-1	syz, C	done	done	129	2719d	2789d	15/29	2480d	9354544cbccf net/tls: fix page double free on TX cleanup
KASAN: slab-out-of-bounds Read in bpf_prog_create net bpf	17	syz, C	done		447	2510d	2592d	15/29	2480d	0033b34a03ec ppp: fix out-of-bounds access in bpf_prog_create()
memory leak in register_netdevice net	3	syz, C			19	2511d	2516d	15/29	2480d	42c17fa69f98 net: fix a leak in register_netdevice()
WARNING: refcount bug in skb_set_owner_w net	13	syz, C	done		2	2516d	2517d	15/29	2480d	501a90c94510 net-backports: inet: protect against too small mtu values.
KMSAN: use-after-free in netlink_recvmsg net	18	syz, C			1	2536d	2536d	15/29	2506d	cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
KMSAN: use-after-free in __skb_try_recv_from_queue net	18	syz, C			4	2535d	2558d	15/29	2506d	cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in ip_sublist_rcv net	2	syz, C	done		287	2549d	2559d	15/29	2506d	51210ad5a558 inet: do not call sublist_rcv on empty list
kernel BUG at include/linux/scatterlist.h:LINE! net	-1	syz, C	done		307	2517d	2710d	15/29	2506d	d10523d0b3d7 net/tls: free the record on encryption error
general protection fault in ip6_sublist_rcv net	2	syz, C	done		327	2549d	2551d	15/29	2506d	51210ad5a558 inet: do not call sublist_rcv on empty list
general protection fault in devlink_get_from_attrs net	2	syz, C			7	2573d	2572d	15/29	2506d	82a843de41d4 net: devlink: fix reporter dump dumpit
general protection fault in veth_get_stats64 net	2	syz, C	done		2	2577d	2577d	15/29	2506d	9077f052abd5 net: propagate errors correctly in register_netdevice()
KASAN: use-after-free Read in slip_open net	19	syz, C	done		3	2524d	2526d	15/29	2506d	e58c19124189 slip: Fix use-after-free Read in slip_open
WARNING in __rtnl_newlink net	-1	syz, C	done		2	2576d	2576d	15/29	2506d	9077f052abd5 net: propagate errors correctly in register_netdevice()
WARNING: ODEBUG bug in free_netdev net	-1	syz, C	done		2	2575d	2575d	15/29	2506d	11fc7d5a0a2d tun: fix memory leak in error path
general protection fault in ip6_tnl_ioctl net	2	syz, C	done		7	2565d	2577d	15/29	2506d	9077f052abd5 net: propagate errors correctly in register_netdevice()
KMSAN: use-after-free in copyout net	18	syz, C			1	2571d	2571d	15/29	2506d	cf94da6f502d Bluetooth: Fix invalid-free in bcsp_close()
general protection fault in virtio_transport_release kvm net virt	2	syz, C	done		7	2528d	2529d	15/29	2506d	039fcccaed33 vsock: avoid to assign transport if its initialization fails
BUG: spinlock recursion in release_sock net	4	syz, C	done		116	2646d	2647d	13/29	2521d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
WARNING in sk_stream_kill_queues (3) net	-1	syz, C	done		622	2693d	3052d	13/29	2522d	9354544cbccf net/tls: fix page double free on TX cleanup
INFO: trying to register non-static key in bond_3ad_update_lacp_rate net	-1	syz, C	done		26	2549d	2551d	13/29	2526d	ad9bd8daf2f9 bonding: fix using uninitialized mode_lock
INFO: trying to register non-static key in bond_3ad_update_ad_actor_settings net	-1	syz, C	done		69	2549d	2551d	13/29	2526d	ad9bd8daf2f9 bonding: fix using uninitialized mode_lock
BUG: MAX_LOCK_DEPTH too low! (2) net	-1	syz, C		done	5	3024d	3054d	13/29	2537d	bab2c80e5a6c nsh: set mac len based on inner packet
inconsistent lock state in ila_xlat_nl_cmd_del_mapping net	4	syz, C		unreliable	2496	2986d	2992d	13/29	2537d	7494de0454af mfd: da9063: Replace regmap_add_irq_chip with devm counterpart
KASAN: stack-out-of-bounds Read in xfrm_state_find (5) net	17	syz, C		done	654	2824d	3126d	13/29	2537d	32bf94fb5c2e xfrm: validate template mode
KASAN: use-after-free Read in _decode_session4 net	19	syz, C		done	3	3129d	3128d	13/29	2537d	c6741fbed6dc vti6: Properly adjust vti6 MTU from MTU of lower device
general protection fault in tcp_cleanup_ulp net	2	syz	done	done	6	2953d	2969d	13/29	2537d	5607fff30363 bpf: sockmap only allow ESTABLISHED sock state
general protection fault in tcp_splice_read net	2	syz, C	done	done	23	2754d	2863d	13/29	2539d	07603b230895 net/smc: propagate file from SMC to TCP socket
kernel BUG at net/ipv4/ip_output.c:LINE! net	-1	syz, C		done	28225	2833d	3024d	13/29	2541d	e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
suspicious RCU usage at ./include/net/inet_sock.h:LINE net	-1	syz, C		done	171	3183d	3274d	13/29	2541d	3f32d0be6c16 tipc: lock wakeup & inputq at tipc_link_reset()
KASAN: use-after-free Read in _decode_session6 net	19	syz, C		done	4	2900d	2968d	13/29	2541d	e7c87bd6cc4e bpf: in __bpf_redirect_no_mac pull mac only if present
BUG: unable to handle kernel NULL pointer dereference in xsk_poll bpf net	10	syz, C	done		10	2562d	2580d	13/29	2544d	df551058f7a3 xsk: Fix crash in poll when device does not support ndo_xsk_wakeup
KASAN: use-after-free Read in rxrpc_release_call afs net	19	syz	done		13	2562d	2617d	13/29	2544d	91fcfbe8852e rxrpc: Fix call crypto state cleanup
KASAN: use-after-free Read in rxrpc_send_keepalive afs net	19	syz, C	error		694	2559d	2631d	13/29	2544d	c48fc11b69e9 rxrpc: Fix call ref leak
memory leak in llc_ui_sendmsg net	3	syz, C			125	2560d	2711d	13/29	2544d	c6ee11c39fcc llc: fix sk_buff leak in llc_sap_state_process()
INFO: task hung in addrconf_verify_work (2) net	1	syz, C			22	2566d	2566d	13/29	2544d	39f13ea2f61b net: avoid potential infinite loop in tc_ctl_action()
KASAN: use-after-free Read in rxrpc_put_peer afs net	19	syz, C	error		38	2560d	2612d	13/29	2544d	55f6c98e3674 rxrpc: Fix trace-after-put looking at the put peer record 9ebeddef58c4 rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
memory leak in llc_conn_ac_send_sabme_cmd_p_set_x net	3	syz, C			225	2560d	2711d	13/29	2544d	b74555de21ac llc: fix sk_buff leak in llc_conn_service()
general protection fault in rxrpc_error_report net afs	2	syz, C	done		6	2560d	2572d	13/29	2544d	f0308fb07080 rxrpc: Fix possible NULL pointer access in ICMP handling
WARNING: suspicious RCU usage in xfrm_alloc_userspi net	4	syz, C	done	error	86	2773d	2774d	13/29	2545d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
general protection fault in get_work_pool net	2	syz, C		done	24	2753d	3156d	13/29	2545d	07bf7908950a xfrm: Validate address prefix lengths in the xfrm selector.
general protection fault in xfrm_init_replay net	2	syz	inconclusive	done	2	3143d	3142d	13/29	2545d	d97ca5d714a5 xfrm_user: uncoditionally validate esn replay attribute struct
WARNING: suspicious RCU usage in xfrm_get_spdinfo net	4	syz, C	done	error	46	2773d	2774d	13/29	2545d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
WARNING: suspicious RCU usage in xfrm_get_sadinfo net	4	syz, C	done	error	28	2773d	2774d	13/29	2545d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
WARNING: suspicious RCU usage in xfrm_get_policy net	4	syz	done	error	8	2774d	2774d	13/29	2545d	f10e0010fae8 net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
KMSAN: uninit-value in inet_ehash_insert net	7	syz, C			7	2573d	2580d	13/29	2564d	6af1799aaf3f net-backports: ipv6: drop incoming packets having a v4mapped source address
general protection fault in xsk_poll net bpf	2	syz, C	done		430	2594d	2621d	13/29	2564d	42fddcc7c64b xsk: use state member for socket synchronization
BUG: sleeping function called from invalid context in tcf_chain0_head_change_cb_del net	5	syz, C	done		187	2580d	2593d	13/29	2564d	e3ae1f96accd net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
INFO: rcu detected stall in pie_timer net	1	syz, C			19	2565d	2600d	13/29	2564d	4ce70b4aed57 net-backports: net: sched: sch_htb: don't call qdisc_put() while holding tree lock
KASAN: use-after-free Read in cbq_enqueue net	19	syz, C	done		4	2572d	2574d	13/29	2564d	e9789c7cc182 sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
general protection fault in dsmark_init net	2	syz, C	done		3	2573d	2575d	13/29	2564d	474f0813a300 sch_dsmark: fix potential NULL deref in dsmark_init()
possible deadlock in pie_timer net	4	syz, C	done		2	2581d	2582d	13/29	2564d	e3ae1f96accd net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
general protection fault in dev_map_hash_update_elem net bpf	2	syz, C	done		4	2598d	2604d	13/29	2564d	af58e7ee6a8d xdp: Fix race in dev_map_hash_update_elem() when replacing element
INFO: rcu detected stall in sys_sendmsg net	1	syz, C	done		2	2596d	2596d	13/29	2571d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
general protection fault in addrconf_f6i_alloc net	2	syz, C			305	2594d	2604d	13/29	2571d	8652f17c658d ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
general protection fault in tls_sk_proto_close (2) net	2	syz	error		246	2594d	2613d	13/29	2571d	44580a0118d3 net: sock_map, fix missing ulp check in sock hash case
BUG: soft lockup in addrconf_dad_work net	1	syz, C	done		1	2598d	2598d	13/29	2571d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
INFO: rcu detected stall in igmp_ifc_timer_expire net	1	syz, C			57	2594d	2853d	13/29	2571d	d4d6ec6dac07 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass net	10	syz, C	done		61	2594d	2602d	13/29	2571d	8b142a00edcf net_sched: check cops->tcf_block in tc_bind_tclass()
KMSAN: uninit-value in capi_write net	7	syz, C			445	2571d	2810d	13/29	2571d	fe163e534e5e isdn/capi: check message length in capi_write()
general protection fault in requeue_rx_msgs net	2	syz	done	inconclusive	1	3067d	3067d	13/29	2575d	eb7f54b90bd8 kcm: Fix use-after-free caused by clonned sockets
WARNING in cbs_dequeue_soft net	-1	syz, C	done		13	2595d	2602d	12/29	2594d	1c6c09a0ae62 net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
general protection fault in packet_lookup_frame net	2	syz, C	done		7	2627d	2627d	12/29	2603d	32d3182cd2cd net/packet: fix race in tpacket_snd()
memory leak in ip6_mc_add_src net	3	syz, C			1	2614d	2614d	12/29	2603d	a84d01647989 mld: fix memory leak in mld_del_delrec()
KASAN: use-after-free Read in rxrpc_queue_local afs net	19	syz, C	done		1	2629d	2628d	12/29	2603d	06d9532fa6b3 rxrpc: Fix read-after-free in rxrpc_queue_local()
general protection fault in tls_write_space net	2	syz			33	2621d	2631d	12/29	2603d	57c722e932cf net/tls: swap sk_write_space on close
KMSAN: uninit-value in rtm_new_nexthop net	7	syz, C			8	2619d	2619d	12/29	2603d	d00ee64e1dcf netlink: Fix nlmsg_parse as a wrapper for strict message parsing
kernel BUG at net/rxrpc/local_object.c:LINE! net afs	-1	syz, C	done		11167	2607d	2674d	12/29	2603d	730c5fd42c1e rxrpc: Fix local endpoint refcounting
KMSAN: uninit-value in rtm_dump_nexthop net	7	syz, C			6	2614d	2630d	12/29	2603d	d00ee64e1dcf netlink: Fix nlmsg_parse as a wrapper for strict message parsing
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind net usb	17	syz, C			2	2627d	2628d	12/29	2603d	54364278fb3c USB: CDC: fix sanity checks in CDC union parser
BUG: corrupted list in rxrpc_local_processor net afs	8	syz, C	done		1679	2624d	2632d	12/29	2603d	b00df840fb40 rxrpc: Fix local endpoint replacement
general protection fault in tls_trim_both_msgs net	2	syz, C	done		36	2635d	2647d	12/29	2613d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
BUG: unable to handle kernel paging request in tls_prots net bpf	8	syz	done		1	2676d	2676d	12/29	2613d	95fa145479fb bpf: sockmap/tls, close can race with map free
memory leak in create_ctx net	3	syz			1	2693d	2693d	12/29	2613d	95fa145479fb bpf: sockmap/tls, close can race with map free
general protection fault in tls_setsockopt net	2	syz	done		7	2642d	2655d	12/29	2613d	5d92e631b8be net/tls: partially revert fix transition through disconnect with close
possible deadlock in xsk_notifier net bpf	4	syz, C	done		495	2652d	2664d	12/29	2627d	5464c3a0e9a0 xdp: fix potential deadlock on socket mutex
KASAN: stack-out-of-bounds Read in hfcsusb_probe usb net	17	syz, C			634	2642d	2748d	12/29	2627d	f384e62a82ba ISDN: hfcsusb: checking idx of ep configuration
general protection fault in send_hsr_supervision_frame net	2	syz, C	done		1395	2656d	2664d	12/29	2635d	311633b60406 hsr: switch ->dellink() to ->ndo_uninit()
memory leak in ip_mc_add_src (2) net	3	syz, C			7	2646d	2675d	12/29	2635d	e5b1c6c6277d igmp: fix memory leak in igmpv3_del_delrec()
general protection fault in ip6_datagram_dst_update net	2	syz, C	done		12	2659d	2662d	12/29	2635d	8975a3abc303 ipv6: fix potential crash in ip6_datagram_dst_update()
KMSAN: uninit-value in bond_start_xmit (2) net	7	syz, C			2309	2635d	2959d	12/29	2635d	9d1bc24b52fb bonding: validate ip header before check IPPROTO_IGMP
memory leak in pfkey_xfrm_policy2msg_prep net	3	syz, C			4	2676d	2707d	12/29	2635d	7c80eb1c7e2b af_key: fix leaks in key_pol_get_resp and dump_sp.
KASAN: use-after-free Read in kfree_skb_list net	19	syz, C	done		383	2682d	2700d	12/29	2635d	b7034146756b net: fix use-after-free in kfree_skb_list
memory leak in __ip6_append_data net	3	syz, C			10	2678d	2704d	12/29	2635d	dc93f46bc4e0 inet: frags: fix use-after-free read in inet_frag_destroy_rcu
KASAN: use-after-free Write in xfrm_hash_rebuild net	22	syz	done		8	2668d	2717d	12/29	2635d	fd709721352d xfrm: policy: fix bydst hlist corruption on hash rebuild
WARNING: suspicious RCU usage in in_dev_dump_addr net	4	syz, C	done		107	2696d	2698d	12/29	2635d	d3e6e285fff3 net: ipv4: fix rcu lockdep splat due to wrong annotation
general protection fault in tcp_v6_send_reset net	2	syz, C	done		353	2691d	2695d	12/29	2635d	392096736a06 ipv6: tcp: fix potential NULL deref in tcp_v6_send_reset()
KASAN: use-after-free Read in inet_frag_destroy_rcu net	19	syz, C	done		61	2703d	2706d	12/29	2635d	dc93f46bc4e0 inet: frags: fix use-after-free read in inet_frag_destroy_rcu
general protection fault in rxrpc_connect_call afs net	2	syz, C	done		15	2684d	2830d	12/29	2635d	e835ada07091 rxrpc: Fix send on a connected, but unbound socket
WARNING: suspicious RCU usage in fib_dump_info_fnhe net	4	syz, C	done		7	2675d	2676d	12/29	2635d	3b525691529b ipv6: fix suspicious RCU usage in rt6_dump_route()
memory leak in hsr_create_self_node net	3	syz, C			5	2674d	2705d	12/29	2635d	b9a1e627405d hsr: implement dellink to clean up resources
general protection fault in call_fib6_multipath_entry_notifiers net	2	syz, C	done		94	2677d	2682d	12/29	2635d	9eee3b4913d7 ipv6: Error when route does not have any valid nexthops
memory leak in packet_set_ring net	3	syz, C			2	2675d	2679d	12/29	2642d	55655e3d1197 net/packet: fix memory leak in packet_set_ring()
general protection fault in inet_accept net	2	syz, C			131	2864d	3025d	12/29	2660d	07603b230895 net/smc: propagate file from SMC to TCP socket
KMSAN: uninit-value in tcp_create_openreq_child net	7	syz, C			4000	2662d	2683d	12/29	2661d	85f9aa7565bd inet: clear num_timeout reqsk_alloc()
KASAN: use-after-free Read in pneigh_get_next net	19	syz	done		2	2686d	2686d	12/29	2661d	f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
memory leak in inet6_create net	3	syz, C			2	2692d	2695d	12/29	2661d	522924b58308 net: correct udp zerocopy refcnt also when zerocopy only on append
KASAN: use-after-free Read in sprintf net	19	syz	done		2	2686d	2686d	12/29	2661d	f3e92cb8e2eb neigh: fix use-after-free read in pneigh_get_next
general protection fault in dst_dev_put (2) net	2	syz, C	done		442	2683d	2872d	12/29	2661d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
KASAN: use-after-free Read in rt_cache_valid net	19	syz	done		5	2694d	2809d	12/29	2661d	c3bcde026684 tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
memory leak in packet_setsockopt net	3	syz, C			10	2695d	2712d	12/29	2682d	afa0925c6fcc packet: unconditionally free po->rollover
memory leak in ip_mc_add_src net	3	syz, C			14	2688d	2712d	12/29	2683d	3580d04aa674 ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
memory leak in llc_ui_create net	3	syz, C			4	2693d	2706d	12/29	2683d	8fb44d60d414 llc: fix skb leak in llc_build_and_send_ui_pkt()
memory leak in inet_create net	3	syz, C			2	2697d	2712d	12/29	2683d	100f6d8e0990 net: correct zerocopy refcnt with udp MSG_MORE
KASAN: use-after-free Read in __dev_map_entry_free bpf net	19	syz, C			473	2765d	3046d	12/29	2683d	2baae3545327 bpf: devmap: fix use-after-free Read in __dev_map_entry_free
BUG: assuming atomic context at net/core/flow_dissector.c:LINE net	-1	syz			19	2718d	2722d	12/29	2687d	b1c17a9a3538 flow_dissector: disable preemption around BPF calls
general protection fault in __handle_mm_fault net	2	syz, C	error		17	2930d	2939d	12/29	2691d	ff09d7ec9786 mm/memory.c: recheck page table entry with page table lock held
WARNING in xfrm_state_fini (2) net	-1	syz, C			37510	2730d	3183d	12/29	2705d	dbb2483b2a46 xfrm: clean up xfrm protocol checks
KMSAN: uninit-value in rtnl_stats_dump net	7	syz			14	2736d	2751d	12/29	2705d	69f23a09daf9 rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
KASAN: slab-out-of-bounds Read in skb_gro_receive (2) net	17	syz, C	done		5	2731d	2731d	12/29	2705d	4dd2b82d5adf udp: fix GRO packet of death
KASAN: stack-out-of-bounds Write in __ip_options_echo net	21	syz	done		8	2739d	2743d	12/29	2705d	20ff83f10f11 ipv4: add sanity checks in ipv4_link_failure()
KMSAN: uninit-value in rtnl_stats_get net	7	syz, C			5	2743d	2751d	12/29	2705d	69f23a09daf9 rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
kernel BUG at net/core/net-sysfs.c:LINE! net	-1	syz, C	done		890	2735d	2771d	12/29	2705d	8ed633b9baf9 Revert "net-sysfs: Fix memory leak in netdev_register_kobject"
INFO: task hung in vhost_net_stop_vq net virt kvm	1	syz, C	done		136	2746d	2883d	12/29	2705d	813dbeb656d6 vhost: reject zero size iova range
WARNING: locking bug in icmp_send net	4	syz	done		1	2802d	2802d	12/29	2723d	9926cb5f8b0f tipc: change to check tipc_own_id to return in tipc_net_stop
KMSAN: uninit-value in ip6_compressed_string nfs net	7	syz, C			9024	2733d	2885d	12/29	2733d	7c2bd9a39845 NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
BUG: corrupted list in rhashtable_walk_enter net	8	syz	error		3	2770d	2769d	12/29	2751d	b5f9bd15b885 ila: Fix rhashtable walker list corruption
WARNING: lock held when returning to user space in tun_get_user net	4	syz, C	done		55	2777d	2778d	12/29	2752d	9180bb4f0460 tun: add a missing rcu_read_unlock() in error path
general protection fault in fib6_purge_rt net	2	syz, C	done		60	2754d	2871d	12/29	2752d	9926cb5f8b0f tipc: change to check tipc_own_id to return in tipc_net_stop
general protection fault in tc_ctl_chain net	2	syz, C			21	2800d	2808d	11/29	2765d	af736bf071e8 net: sched: potential NULL dereference in tcf_block_find()
KASAN: use-after-free Read in unix_dgram_poll net	19	syz			2	2794d	2791d	11/29	2765d	84c4e1f89fef aio: simplify - and fix - fget/fput for io_submit()
KMSAN: uninit-value in gue6_err (2) net	7	syz, C			2826	2766d	2788d	11/29	2765d	5355ed6388e2 fou, fou6: avoid uninit-value in gue_err() and gue6_err()
KMSAN: kernel-infoleak in move_addr_to_user (2) net	9	syz, C			8	2767d	2781d	11/29	2765d	163d1c3d6f17 l2tp: fix infoleak in l2tp_ip6_recvmsg()
general protection fault in xsk_diag_dump net bpf	2	syz, C			5	2783d	2789d	11/29	2765d	915905f8b1d4 xsk: fix potential crash in xsk_diag_put_umem()
KMSAN: uninit-value in gue_err (2) net	7	syz, C			1617	2766d	2788d	11/29	2765d	5355ed6388e2 fou, fou6: avoid uninit-value in gue_err() and gue6_err()
KASAN: use-after-free Write in __xfrm_policy_unlink net	22	syz, C			254	2791d	3019d	11/29	2788d	1548bc4e0512 xfrm: policy: delete inexact policies from inexact list on hash rebuild
WARNING in __skb_flow_dissect (3) net	-1	syz			224	2838d	2927d	11/29	2788d	0b7959b62573 tun: publish tfile after it's fully initialized
BUG: unable to handle kernel paging request in depot_save_stack net	8	syz, C			1	2848d	2848d	11/29	2788d	44039e00171b fou6: Prevent unbounded recursion in GUE error handler
WARNING in tcp_send_loss_probe net	-1	syz, C			9	2798d	2850d	11/29	2788d	bf50b606cfd8 tcp: repaired skbs must init their tso_segs
KASAN: stack-out-of-bounds Read in pick_next_task_fair net	17	syz, C			1	2848d	2848d	11/29	2788d	44039e00171b fou6: Prevent unbounded recursion in GUE error handler
general protection fault in icmp6_send net	2	syz			2	2849d	2849d	11/29	2788d	8d9336704521 ipv6: make icmp6_send() robust against null skb->dev
general protection fault in team_nl_cmd_options_set net	2	syz, C			7	2858d	2815d	11/29	2788d	2fdeee254923 team: avoid complex list operations in team_nl_cmd_options_set()
KASAN: stack-out-of-bounds Read in gue_err_proto_handler net	17	syz, C			1	2845d	2845d	11/29	2788d	44039e00171b fou6: Prevent unbounded recursion in GUE error handler
KMSAN: uninit-value in gue_err net	7	syz, C			4686	2788d	2842d	11/29	2788d	26fc181e6cac fou, fou6: do not assume linear skbs
general protection fault in ip6erspan_set_version net	2	syz, C			39	2797d	2802d	11/29	2788d	efcc9bcaf77c net: ip6_gre: fix possible NULL pointer dereference in ip6erspan_set_version
WARNING in xfrm6_tunnel_net_exit (2) net	-1	syz, C			48816	2797d	3079d	11/29	2788d	f75a2804da39 xfrm: destroy xfrm_state synchronously on net exit path
WARNING: bad unlock balance in rxrpc_recvmsg afs net	4	syz, C			9	2814d	2818d	11/29	2788d	6dce3c20ac42 rxrpc: bad unlock balance in rxrpc_recvmsg
KMSAN: uninit-value in gue6_err net	7	syz, C			8359	2788d	2842d	11/29	2788d	26fc181e6cac fou, fou6: do not assume linear skbs
general protection fault in finish_wait net	2	syz, C			22	2812d	3028d	11/29	2795d	78abe3d0dfad net/smc: fix TCP fallback socket release
KASAN: out-of-bounds Write in tls_push_record net	21	syz, C			10	2928d	3029d	11/29	2795d	d829e9c4112b tls: convert to generic sk_msg interface
kernel BUG at include/linux/mm.h:LINE! (2) net	-1	syz, C			1009	2795d	3058d	11/29	2795d	d829e9c4112b tls: convert to generic sk_msg interface
KASAN: use-after-free Write in tls_push_record (2) net	22	syz, C			64	2923d	3025d	11/29	2795d	d829e9c4112b tls: convert to generic sk_msg interface
WARNING in __debug_object_init (3) bpf net	-1	syz, C			1557	2916d	2917d	11/29	2832d	2cb494a36c98 bpf: add tests for direct packet access from CGROUP_SKB
general protection fault in encode_rpcb_string net nfs	2	syz, C			6	3014d	3111d	11/29	2837d	81c88b18de1f sunrpc: handle ENOMEM in rpcb_getport_async
KMSAN: uninit-value in vti6_tnl_xmit net	7	syz			60	2842d	2865d	11/29	2837d	cb9f1b783850 ip: validate header length on virtual device xmit
KASAN: invalid-free in x25_asy_free net	24	syz, C			67	2849d	2855d	11/29	2837d	d5c7c745f254 net/wan: fix a double free in x25_asy_open_tty()
KMSAN: uninit-value in check_6rd net	7	syz, C			81	2843d	2865d	11/29	2837d	cb9f1b783850 ip: validate header length on virtual device xmit
KASAN: slab-out-of-bounds Read in tun_net_xmit (2) net	17	syz, C			10	2853d	3021d	11/29	2837d	aff6db454599 ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
KMSAN: kernel-infoleak in capi_unlocked_ioctl net	9	syz, C			109	2842d	2853d	11/29	2837d	d63967e475ae isdn: fix kernel-infoleak in capi_unlocked_ioctl
BUG: corrupted list in ___neigh_create net	8	syz, C			706	2871d	2874d	11/29	2842d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
BUG: corrupted list in neigh_mark_dead net	8	syz, C			4117	2871d	2874d	11/29	2842d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KMSAN: uninit-value in __inet6_bind net	7	syz, C			56	2843d	2873d	11/29	2842d	fb2427454631 ipv6: explicitly initialize udp6_addr in udp_sock_create6()
general protection fault in inet_lhash2_lookup net	2	syz, C			1137	2866d	2869d	11/29	2842d	eedbbb0d98b2 net: dccp: initialize (addr,port) listening hashtable
general protection fault in inet6_lhash2_lookup net	2	syz, C			718	2866d	2869d	11/29	2842d	eedbbb0d98b2 net: dccp: initialize (addr,port) listening hashtable
KASAN: use-after-free Read in neigh_mark_dead net	19	syz, C			858	2871d	2874d	11/29	2842d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
general protection fault in __ipv6_sock_mc_join net	2	syz, C			9	2869d	2873d	11/29	2842d	fb83ed496b9a tipc: compare remote and local protocols in tipc_udp_enable()
KASAN: use-after-free Read in ___neigh_create net	19	syz, C			164	2871d	2874d	11/29	2842d	8cc196d6ef86 neighbor: gc_list changes should be protected by table lock
KASAN: use-after-free Read in vhost_transport_send_pkt kvm net virt	19	syz			36	2880d	3006d	11/29	2866d	834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KMSAN: kernel-infoleak in _copy_to_iter (4) net	9	syz, C			56	2880d	2885d	11/29	2866d	688838934c23 rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
KASAN: use-after-free Read in vhost_work_queue kvm net virt	19	syz			30	2878d	2977d	11/29	2866d	834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KASAN: use-after-free Read in vhost_transport_cancel_pkt kvm net virt	19	syz			17	2904d	2949d	11/29	2866d	834e772c8db0 vhost/vsock: fix use-after-free in network stack callers
KMSAN: uninit-value in dev_mc_add_excl net	7	syz, C			13	2906d	2918d	11/29	2901d	da71577545a5 rtnetlink: Disallow FDB configuration for non-Ethernet device
KMSAN: uninit-value in dev_uc_add_excl net	7	syz, C			20	2913d	2954d	11/29	2901d	da71577545a5 rtnetlink: Disallow FDB configuration for non-Ethernet device
KASAN: use-after-free Read in tcf_block_find net	19	syz, C			27	2942d	2948d	11/29	2901d	460b360104d5 net_sched: fix a crash in tc_new_tfilter()
general protection fault in __skb_flow_dissect (2) net	2	syz, C			11	2949d	2957d	11/29	2901d	d0e13a1488ad flow_dissector: lookup netns by skb->sk if skb->dev is NULL
KMSAN: uninit-value in ip_tunnel_lookup (2) net	7	syz, C			2	2919d	2920d	11/29	2901d	b0350d51f001 ip_gre: fix parsing gre header in ipgre_err
WARNING in tcp_cleanup_ulp net	-1	syz			16	2928d	2928d	11/29	2901d	aadd4355918f tcp, ulp: remove socket lock assertion on ULP cleanup
general protection fault in dev_gro_receive (2) net	2	syz			4	2926d	2933d	11/29	2901d	ece23711dd95 net: Properly unlink GRO packets on overflow.
WARNING in tcp_close net	-1	syz			284	2922d	3022d	11/29	2901d	8873c064d1de tcp: do not release socket ownership in tcp_close()
KMSAN: kernel-infoleak in _copy_to_iter (3) net	9	syz, C			36	2915d	2926d	11/29	2915d	b06f9d9f1a90 tipc: fix info leak from kernel tipc_event
KASAN: slab-out-of-bounds Read in _decode_session6 net	17	syz, C			35	2915d	2973d	11/29	2915d	9f7e43da6ae4 net/xfrm: fix out-of-bounds packet access
kernel BUG at net/core/dev.c:LINE! (2) net	-1	syz			2	2935d	2935d	11/29	2926d	52b5d6f5dcf0 net: make skb_partial_csum_set() more robust against overflows
WARNING in __skb_flow_dissect net	-1	syz			3	2934d	2935d	11/29	2933d	af3fb24eecb2 tun: napi flags belong to tfile
general protection fault in dev_gro_receive net	2	syz			8	2935d	2947d	11/29	2933d	af3fb24eecb2 tun: napi flags belong to tfile
possible deadlock in flush_workqueue net	4	syz, C			73762	2940d	2983d	11/29	2933d	d4859d749aa7 net-backports: bonding: avoid possible dead-lock
KASAN: use-after-free Read in rawv6_sendmsg net	19	syz, C			84	2935d	2967d	11/29	2933d	a688caa34beb net-backports: ipv6: take rcu lock in rawv6_send_hdrinc()
KASAN: use-after-free Read in ip_cmsg_recv_offset net	19	syz, C			9	2943d	2945d	11/29	2933d	64199fc0a46b net-backports: ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
possible deadlock in team_vlan_rx_add_vid net	4	syz			5	2963d	2997d	11/29	2933d	471b83bd8bbe team: Forbid enslaving team device to itself
KMSAN: uninit-value in ip6_tnl_start_xmit net	7	syz, C			69	2947d	2957d	11/29	2933d	76c0ddd8c3a6 ip6_tunnel: be careful when accessing the inner header
KMSAN: uninit-value in pppoe_rcv net	7	syz, C			2	3093d	2963d	11/29	2933d	8540827ebac6 pppoe: fix reception of frames with no mac header
WARNING: suspicious RCU usage in inet_csk_route_req net	4	syz, C			43	2941d	3175d	11/29	2933d	1ad98e9d1bdf tcp/dccp: fix lockdep issue when SYN is backlogged
KMSAN: kernel-infoleak in _copy_to_iter (2) net	9	syz, C			7	2942d	2969d	11/29	2937d	45c180bc29ba xfrm_user: prevent leaking 2 bytes of kernel memory
KMSAN: uninit-value in memcmp (2) net	7	syz, C			131	2962d	2953d	10/29	2951d	77d36398d99f net: fix uninit-value in __hw_addr_add_ex()
KASAN: use-after-free Read in ip6_hold_safe net	19	syz, C			1	3003d	3003d	8/29	2977d	6d37fa49da1e l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
WARNING: refcount bug in llc_sap_find net	13	syz, C			18	2997d	2998d	8/29	2977d	0dcb82254d65 llc: use refcount_inc_not_zero() for llc_sap_find()
possible deadlock in rhashtable_lookup_insert_fast net	4	syz, C			28	2989d	2992d	8/29	2977d	ff93bca76992 ila: make lockdep happy again
KASAN: use-after-free Write in ip6_hold_safe net	22	syz, C			25	3001d	3012d	8/29	2977d	6d37fa49da1e l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
KASAN: slab-out-of-bounds Write in eth_header_parse net	21	syz, C			7	2996d	3009d	8/29	2977d	4576cd469d98 packet: refine ring v3 block size test to hold one frame
WARNING: ODEBUG bug in vsock_stream_connect net virt	-1	syz, C			42	2997d	3006d	8/29	2977d	455f05ecd2b2 vsock: split dwork to avoid reinitializations
WARNING in refcount_inc (3) net	-1	syz, C			7	3126d	3127d	8/29	2981d	8e04944f0ea8 mm,vmscan: Allow preallocating memory for register_shrinker().
kernel BUG at net/ipv6/route.c:LINE! net	-1	syz, C			197	3000d	3022d	8/29	2997d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
possible deadlock in bond_get_stats net	4	syz, C			11	3003d	3007d	8/29	2997d	7e2556e40026 bonding: avoid lockdep confusion in bond_get_stats()
WARNING in __ip6_make_skb net	-1	syz, C			1	3022d	3022d	8/29	2997d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
WARNING in ip6_sk_dst_lookup_flow net	-1	syz, C			2	3003d	3020d	8/29	2997d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
WARNING in ip6_setup_cork net	-1	syz, C			4	3002d	3022d	8/29	2997d	e873e4b9cc7e ipv6: use fib6_info_hold_safe() when necessary
KMSAN: kernel-infoleak in put_cmsg net	9	syz, C			3	3030d	3019d	8/29	2997d	2efd4fca703a ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
KASAN: use-after-free Write in dst_release (2) net	22	syz, C			3	3003d	3004d	8/29	2997d	e6aed040eafb Revert "net/ipv6: fix metrics leak"
KMSAN: kernel-infoleak in _copy_to_iter net	9	syz, C			285	3013d	3048d	8/29	2997d	45c180bc29ba xfrm_user: prevent leaking 2 bytes of kernel memory
KASAN: slab-out-of-bounds Read in ipv6_gso_pull_exthdrs net	17	syz, C			4	3037d	3052d	8/29	2998d	bab2c80e5a6c nsh: set mac len based on inner packet
INFO: rcu detected stall in vprintk_emit net nfc	1	syz			2	3035d	3041d	8/29	2998d	3bc53be9db21 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
WARNING in set_precision net	-1	syz, C			140	3018d	3059d	8/29	2998d	c604cb767049 KEYS: DNS: fix parsing multiple options
KASAN: use-after-free Read in ipv6_gso_pull_exthdrs net	19	syz, C			5	3016d	3048d	8/29	2998d	bab2c80e5a6c nsh: set mac len based on inner packet
WARNING in iov_iter_revert net	-1	syz, C			74	3018d	3084d	8/29	2998d	32da12216e46 tls: Stricter error checking in zerocopy sendmsg path
general protection fault in do_tcp_getsockopt net	2	syz, C			9	3017d	3029d	8/29	2998d	6508b6781be0 tcp: cleanup copied_seq and urg_data in tcp_disconnect
KASAN: use-after-free Read in bpf_test_finish bpf net	19	syz, C			1211	3013d	3028d	8/29	2998d	6e6fddc78323 bpf: fix panic due to oob in bpf_prog_test_run_skb
KASAN: use-after-free Write in skb_release_data net	22	syz, C			1903	3072d	3125d	8/29	2998d	993675a3100b packet: reset network header if packet shorter than ll reserved space
kernel BUG at net/packet/af_packet.c:LINE! (3) net	-1	syz			5	3148d	3195d	8/29	3007d	a6361f0ca4b2 packet: fix bitfield update race
KMSAN: uninit-value in ip_tunnel_xmit net	7	syz, C			2594	3019d	3106d	8/29	3019d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
WARNING: suspicious RCU usage in fib6_info_alloc net	4	syz			2	3110d	3109d	8/29	3027d	27b10608a2fe net/ipv6: Fix gfp_flags arg to addrconf_prefix_route
WARNING in bpf_int_jit_compile bpf net	-1	syz			11	3035d	3072d	8/29	3027d	9facc336876f bpf: reject any prog that failed read-only lock
possible deadlock in __might_fault (2) net	4	syz, C			20	3097d	3100d	8/29	3027d	05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KMSAN: uninit-value in _copy_to_iter (2) kvm net virt	7	syz, C			226	3059d	3104d	8/29	3027d	670ae9caaca4 vhost: fix info leak due to uninitialized memory
KASAN: slab-out-of-bounds Read in bpf_csum_update bpf net	17	syz, C			2	3065d	3063d	8/29	3027d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
possible deadlock in tcp_mmap net	4	syz, C			1908	3097d	3100d	8/29	3027d	05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KASAN: use-after-free Write in prb_fill_curr_block net	22	syz, C			2	3065d	3066d	8/29	3027d	eb73190f4fbe net/packet: refine check for priv area size
WARNING in skb_warn_bad_offload (2) net	-1	syz, C			6	3100d	3100d	8/29	3027d	a8c744a8b437 udp: disable gso with no_check_tx
KASAN: slab-out-of-bounds Read in bpf_skb_vlan_push bpf net	17	syz			2	3053d	3053d	8/29	3027d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in skb_ensure_writable net bpf	19	syz, C			4	3056d	3063d	8/29	3027d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
WARNING: kmalloc bug in xdp_umem_create net bpf	-1	syz, C			7	3051d	3057d	8/29	3027d	a343993c518c xsk: silence warning on memory allocation failure
KASAN: use-after-free Write in tls_push_record net	22	syz, C			24	3028d	3072d	8/29	3027d	a447da7d0041 tls: fix use-after-free in tls_push_record
WARNING: lock held when returning to user space! (2) net	4	syz, C			9	3087d	3089d	8/29	3027d	9e5750106630 net/ipv6: fix lock imbalance in ip6_route_del()
INFO: rcu detected stall in corrupted net	1	syz			1	3077d	3076d	8/29	3027d	1d88ba1ebb27 sctp: not allow transport timeout value less than HZ/5 for hb_timer
BUG: unable to handle kernel NULL pointer dereference in corrupted net	10	syz, C			5	3058d	3058d	8/29	3027d	c0129a061442 smc: convert to ->poll_mask
KASAN: slab-out-of-bounds Read in bpf_skb_change_proto net bpf	17	syz, C			2	3057d	3056d	8/29	3027d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
WARNING: possible circular locking dependency detected (4) net	-1	syz, C			27	3101d	3108d	8/29	3027d	05255b823a61 tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
KASAN: slab-out-of-bounds Read in ip6_xmit (3) net	17	syz, C			69	3033d	3075d	8/29	3027d	9901c5d77e96 bpf: sockmap, fix crash when ipv6 sock is added
KASAN: slab-out-of-bounds Read in skb_ensure_writable bpf net	17	syz, C			9	3054d	3063d	8/29	3027d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in bpf_csum_update bpf net	19	syz, C			1	3065d	3063d	8/29	3027d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
BUG: unable to handle kernel paging request in bpf_int_jit_compile bpf net	8	syz			2	3039d	3043d	8/29	3027d	85782e037f8a bpf: undo prog rejection on read-only lock failure
KASAN: slab-out-of-bounds Write in prb_fill_curr_block net	21	syz, C			2	3066d	3066d	8/29	3027d	eb73190f4fbe net/packet: refine check for priv area size
KMSAN: uninit-value in rtnetlink_put_metrics net	7	syz			3	3061d	3063d	8/29	3027d	5b5e7a0de2bb net: metrics: add proper netlink validation
KASAN: slab-out-of-bounds Read in bpf_skb_change_head net bpf	17	syz, C			2	3053d	3053d	8/29	3027d	58990d1ff3f7 bpf: reject passing modified ctx to helper functions
KASAN: use-after-free Read in ip6_route_mpath_notify net	19	syz, C			25	3060d	3065d	8/29	3027d	f7225172f25a net/ipv6: prevent use after free in ip6_route_mpath_notify
KASAN: null-ptr-deref Write in xdp_umem_unaccount_pages bpf net	12	syz, C			25	3056d	3059d	8/29	3027d	c09290c56376 bpf, xdp: fix crash in xdp_umem_unaccount_pages
WARNING: suspicious RCU usage in rt6_remove_exception_rt net	4	syz			1761	3103d	3104d	8/29	3027d	091311debcf0 net/ipv6: fix LOCKDEP issue in rt6_remove_exception_rt()
KASAN: use-after-free Read in skb_dequeue net	19	syz, C			4	3046d	3046d	8/29	3027d	945d015ee0c3 net/packet: fix use-after-free
KASAN: null-ptr-deref Read in refcount_sub_and_test net	11	syz, C			4	3107d	3109d	8/29	3027d	263243d6c257 net/ipv6: Fix ip6_convert_metrics() bug
INFO: trying to register non-static key in tun_do_read net	-1	syz, C			28	3083d	3090d	5/29	3048d	7063efd33bb1 tuntap: fix use after free during release
KASAN: use-after-free Read in iptunnel_handle_offloads net	19	syz, C			133	3073d	3119d	5/29	3048d	9aad13b087ab packet: fix reserve calculation
BUG: spinlock bad magic in tun_do_read net	4	syz			1	3090d	3090d	5/29	3059d	b196d88aba8a tun: fix use after free for ptr_ring
kernel BUG at net/ipv4/tcp_output.c:LINE! (2) net	-1	syz			23	3091d	3196d	5/29	3059d	7f582b248d0a tcp: purge write queue in tcp_connect_init()
KASAN: use-after-free Read in skb_copy_datagram_iter net	19	syz, C			7	3095d	3133d	5/29	3059d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
WARNING in kcm_exit_net (3) net	-1	syz			5	3067d	3067d	5/29	3059d	eb7f54b90bd8 kcm: Fix use-after-free caused by clonned sockets
BUG: soft lockup in _decode_session6 net	1	syz, C			1	3086d	3086d	5/29	3059d	d9f92772e8ec xfrm6: avoid potential infinite loop in _decode_session6()
KASAN: use-after-free Read in __dev_queue_xmit (2) net	19	syz, C			2	3077d	3077d	5/29	3059d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
KASAN: use-after-free Read in copyout net	19	syz, C			11	3077d	3133d	5/29	3059d	b84bbaf7a6c8 packet: in packet_snd start writing at link layer allocation
WARNING in xfrm6_tunnel_net_exit net	-1	syz			14002	3083d	3213d	5/29	3081d	b48c05ab5d32 xfrm: Fix warning in xfrm6_tunnel_net_exit.
KASAN: use-after-free Read in tls_sk_proto_close (2) net	19	syz, C			297	3086d	3093d	5/29	3081d	98f0a39529e5 tls: fix use after free in tls_sk_proto_close
KMSAN: uninit-value in move_addr_to_user (2) net	7	syz, C			44	3082d	3089d	5/29	3081d	09c8b9718a7a tipc: fix one byte leak in tipc_sk_set_orig_addr()
KASAN: slab-out-of-bounds Read in pfkey_add net	17	syz, C			835	3086d	3233d	5/29	3081d	4b66af2d6356 af_key: Always verify length of provided sadb_key
WARNING in tcp_sacktag_write_queue net	-1	syz, C			8	3098d	3170d	5/29	3082d	bf2acc943a45 tcp: fix TCP_REPAIR_QUEUE bound checking
KMSAN: uninit-value in put_cmsg net	7	syz, C			2	3095d	3095d	5/29	3082d	eb80ca476ec1 rds: do not leak kernel memory to user land
WARNING in tcp_mark_head_lost net	-1	syz, C			18	3091d	3173d	5/29	3082d	16ae6aa17052 net-backports: tcp: ignore Fast Open on repair mode
KMSAN: uninit-value in rt6_multipath_hash net	7	syz, C			3	3082d	3100d	5/29	3082d	cea67a2dd6b2 ipv6: fix uninit-value in ip6_multipath_l3_keys()
KASAN: use-after-free Read in __dev_queue_xmit net	19	syz, C			10	3096d	3214d	5/29	3089d	d0c081b49137 flow_dissector: properly cap thoff field
KASAN: use-after-free Read in ip6_xmit net	19	syz, C			5174	3136d	3214d	5/29	3089d	c113187d38ff tls: Use correct sk->sk_prot for IPV6
KMSAN: uninit-value in fib_create_info net	7	syz, C			19	3114d	3120d	5/29	3089d	b1993a2de12c net: fix rtnh_ok()
kernel BUG at drivers/vhost/vhost.c:LINE! (2) virt kvm net	-1	syz, C			139	3091d	3121d	5/29	3089d	d14d2b78090c vhost: fix vhost_vq_access_ok() log check
BUG: corrupted list in team_nl_cmd_options_set net	8	syz, C			2	3113d	3116d	5/29	3089d	4fb0534fb7bb team: avoid adding twice the same option to the event list
KMSAN: uninit-value in __skb_try_recv_from_queue net	7	syz, C			108	3090d	3120d	5/29	3089d	b13dda9f9aa7 net: initialize skb->peeked when cloning
KASAN: stack-out-of-bounds Write in ipip6_tunnel_locate net	21	syz, C			33	3115d	3122d	5/29	3089d	b95211e066fc ipv6: sit: better validate user provided tunnel names
KMSAN: uninit-value in strlcpy net	7	syz, C			2	3092d	3092d	5/29	3089d	537b361fbcbc vti6: better validate user provided tunnel names
KASAN: null-ptr-deref Read in refcount_inc_not_zero net	11	syz, C			2352	3103d	3105d	5/29	3089d	3a04ce7130a7 llc: fix NULL pointer deref for SOCK_ZAPPED
KASAN: use-after-free Write in dst_release net	22	syz, C			832	3115d	3125d	5/29	3089d	bfacfb457b36 pptp: remove a buggy dst release in pptp_connect()
KASAN: use-after-free Read in pppol2tp_connect (3) net	19	syz, C			22	3116d	3134d	5/29	3089d	6b9f34239b00 l2tp: fix races in tunnel creation
KMSAN: uninit-value in packet_set_ring net	7	syz, C			6	3096d	3113d	5/29	3089d	5171b37d9596 net: af_packet: fix race in PACKET_{R|T}X_RING
KMSAN: uninit-value in move_addr_to_user net	7	syz, C			74	3090d	3120d	5/29	3089d	6780db244d6b sctp: do not leak kernel memory to user space
KMSAN: uninit-value in fib6_new_table net	7	syz, C			3	3106d	3106d	5/29	3089d	aa8f8778493c ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
KMSAN: uninit-value in tcp_parse_options net	7	syz, C			38	3090d	3117d	5/29	3089d	721230326891 tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
possible deadlock in rtnl_lock (5) net	4	syz, C			1009	3103d	3132d	5/29	3089d	5c64576a7789 ipvs: fix rtnl_lock lockups caused by start_sync_thread
KASAN: stack-out-of-bounds Write in __ip_tunnel_create net	21	syz, C			29	3116d	3123d	5/29	3089d	9cb726a212a8 ip_tunnel: better validate user provided tunnel names
KMSAN: uninit-value in memcmp net	7	syz, C			30	3091d	3120d	5/29	3089d	77d36398d99f net: fix uninit-value in __hw_addr_add_ex()
KMSAN: uninit-value in inet_getpeer net	7	syz, C			54	3089d	3119d	5/29	3089d	b6a37e5e2541 inetpeer: fix uninit-value in inet_getpeer
KMSAN: uninit-value in netlink_sendmsg net	7	syz, C			2493	3089d	3120d	5/29	3089d	6091f09c2f79 netlink: fix uninit-value in netlink_sendmsg
KMSAN: uninit-value in inet_csk_bind_conflict net	7	syz, C			446	3089d	3120d	5/29	3089d	3099a5291893 soreuseport: initialise timewait reuseport field
KASAN: stack-out-of-bounds Write in ip6gre_tunnel_locate net	21	syz, C			923	3115d	3123d	5/29	3089d	5f42df013b8b ip6_gre: better validate user provided tunnel names
BUG: sleeping function called from invalid context at net/core/sock.c:LINE (3) net	-1	syz, C			234	3167d	3170d	5/29	3089d	26736a08ee0f tipc: don't call sock_release() in atomic context
KMSAN: uninit-value in pppol2tp_connect net	7	syz, C			13	3090d	3105d	5/29	3089d	eb1c28c05894 l2tp: check sockaddr length in pppol2tp_connect()
KMSAN: uninit-value in inet6_rtm_delroute net	7	syz, C			9	3109d	3120d	5/29	3089d	b1993a2de12c net: fix rtnh_ok()
WARNING in strp_done net	-1	syz, C			2336	3124d	3172d	5/29	3089d	dff8baa26117 kcm: Call strp_stop before strp_done in kcm_attach
KMSAN: uninit-value in neigh_dump_info net	7	syz, C			6	3102d	3116d	5/29	3089d	7dd07c143a4b net: validate attribute sizes in neigh_dump_table()
KMSAN: uninit-value in netif_skb_features net	7	syz, C			119	3089d	3116d	5/29	3089d	7ce2367254e8 vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
WARNING: kobject bug in netdev_queue_update_kobjects net	-1	syz, C			27	3091d	3153d	5/29	3089d	3e14c6abbfb5 kobject: don't use WARN for registration failures
KASAN: use-after-free Read in perf_trace_lock_acquire (2) kvm net virt	19	syz, C			188	3185d	3257d	5/29	3103d	4cd879515d68 vhost_net: stop device during reset owner
KASAN: slab-out-of-bounds Write in tcp_v6_syn_recv_sock net	21	syz, C			1063	3198d	3215d	5/29	3103d	d91c3e17f75f net/tls: Only attach to sockets in ESTABLISHED state
WARNING in skb_warn_bad_offload net	-1	syz, C			6527	3154d	3277d	5/29	3119d	8d74e9f88d65 net: avoid skb_warn_bad_offload on IS_ERR
kernel BUG at ./include/linux/skbuff.h:LINE! (2) net	-1	syz, C			5	3158d	3136d	5/29	3121d	10b8a3de603d ipv6: the entire IPv6 header chain must fit the first fragment
KASAN: use-after-free Read in worker_thread (2) net	19	syz			6	3261d	3270d	5/29	3121d	581e7226a5d4 kcm: Only allow TCP sockets to be attached to a KCM mux
possible deadlock in handle_rx virt kvm net	4	syz, C			4	3133d	3133d	5/29	3121d	aaa3149bbee9 vhost_net: add missing lock nesting notation
kernel BUG at drivers/vhost/vhost.c:LINE! kvm net virt	-1	syz, C			152	3121d	3140d	5/29	3121d	d65026c6c62e vhost: validate log when IOTLB is enabled
BUG: corrupted list in remove_wait_queue virt kvm net	8	syz, C			5	3134d	3137d	5/29	3121d	dc6455a71c7f vhost: correctly remove wait queue during poll failure
BUG: unable to handle kernel paging request in netdev_queue_update_kobjects net	8	syz			1	3132d	3132d	5/29	3121d	c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
BUG: unable to handle kernel (2) net	-1	syz			1	3131d	3131d	5/29	3121d	c769accdf3d8 vlan: Fix vlan insertion for packets without ethernet header
KASAN: stack-out-of-bounds Read in xfrm_state_find (4) net	17	syz, C			102	3135d	3186d	4/29	3135d	19d7df69fdb2 xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems
KASAN: use-after-free Read in pfifo_fast_enqueue net	19	syz, C			20	3137d	3201d	4/29	3135d	cce6294cc2ea net: sched: fix uses after free
general protection fault in dccp_write_xmit net	2	syz, C			5	3153d	3189d	4/29	3135d	67f93df79aee dccp: check sk for closed state in dccp_sendmsg()
KASAN: use-after-free Read in pppol2tp_connect (2) net	19	syz, C			10	3136d	3151d	4/29	3135d	17cfe79a65f9 l2tp: do not accept arbitrary sockets
WARNING: kmalloc bug in xfrm_add_sa net	-1	syz, C			109	3135d	3174d	4/29	3135d	d97ca5d714a5 xfrm_user: uncoditionally validate esn replay attribute struct
KASAN: slab-out-of-bounds Read in ip6_xmit (2) net	17	syz, C			259	3138d	3152d	4/29	3135d	b954f94023dc l2tp: fix races with ipv4-mapped ipv6 addresses
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock net	21	syz, C			4	3153d	3153d	4/29	3135d	17cfe79a65f9 l2tp: do not accept arbitrary sockets
KASAN: use-after-free Read in strp_data_ready net	19	syz, C			204	3193d	3285d	4/29	3147d	581e7226a5d4 kcm: Only allow TCP sockets to be attached to a KCM mux
KASAN: slab-out-of-bounds Read in ip6_xmit net	17	syz, C			156	3154d	3204d	4/29	3152d	c113187d38ff tls: Use correct sk->sk_prot for IPV6
general protection fault in pppol2tp_connect net	2	syz, C			1025	3153d	3202d	4/29	3152d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
WARNING in debug_print_object net	-1	syz, C			2	3185d	3185d	4/29	3152d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
KASAN: use-after-free Read in inet_shutdown net	19	syz, C			22	3155d	3201d	4/29	3152d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
KASAN: use-after-free Read in pppol2tp_connect net	19	syz, C			25	3153d	3202d	4/29	3152d	28f5bfb81919 l2tp: fix tunnel lookup use-after-free race
WARNING: kmalloc bug in cpu_map_update_elem bpf net	-1	syz, C			2677	3160d	3172d	4/29	3160d	7fc17e909edf bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
WARNING in kvmalloc_node net bpf	-1	syz, C			513	3167d	3173d	4/29	3160d	7fc17e909edf bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
WARNING in kmalloc_slab (3) net	-1	syz, C			1901	3161d	3245d	4/29	3160d	88913bd8ea2a kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE
possible deadlock in rtnl_lock (4) net	4	syz, C			73333	3162d	3179d	4/29	3160d	01ea306f2ac2 netfilter: drop outermost socket lock in getsockopt()
WARNING: kmalloc bug in tun_device_event net	-1	syz, C			15	3178d	3180d	4/29	3174d	6e6e41c31122 ptr_ring: fail early if queue occupies more than KMALLOC_MAX_SIZE 0bf7800f1799 ptr_ring: try vmalloc() when kmalloc() fails
possible deadlock in rtnl_lock (3) net	4	syz, C			3633	3179d	3180d	4/29	3179d	3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
WARNING: bad unlock balance in ipmr_mfc_seq_stop net	4	syz, C			286	3186d	3233d	4/29	3180d	4adfa79fc254 ip6mr: fix stale iterator
possible deadlock in rtnl_lock (2) net	4	syz, C			10369	3182d	3185d	4/29	3182d	3f34cfae1238 netfilter: on sockopt() acquire sock lock only in the required scope
suspicious RCU usage at ./include/linux/inetdevice.h:LINE (2) net	-1	syz, C			4	3185d	3185d	4/29	3182d	e7aadb27a541 net: igmp: add a missing rcu locking section
WARNING in reuseport_add_sock net	-1	syz, C			7	3195d	3205d	4/29	3182d	4db428a7c9ab soreuseport: fix mem leak in reuseport_add_sock()
INFO: trying to register non-static key in pfifo_fast_reset net	-1	syz, C			4	3229d	3232d	4/29	3183d	1df94c3c5dad net_sched: properly check for empty skb array on error path
suspicious RCU usage at net/ipv6/ip6_fib.c:LINE net	-1	syz, C			56	3193d	3215d	4/29	3185d	4512c43eac7e ipv6: remove null_entry before adding default route
general protection fault in __netlink_ns_capable net	2	syz, C			74	3208d	3215d	4/29	3185d	f428fe4a04cc rtnetlink: give a user socket to get_target_net()
KASAN: double-free or invalid-free in skb_free_head net virt	24	syz, C			13	3224d	3231d	4/29	3185d	d76c68109f37 crypto: pcrypt - fix freeing pcrypt instances
KASAN: slab-out-of-bounds Read in xfrm_hash_rebuild net	17	syz, C			18	3203d	3271d	4/29	3186d	862591bf4f51 xfrm: skip policies marked as dead while rehashing
WARNING in vhost_dev_cleanup net virt kvm	-1	syz, C			4	3187d	3193d	4/29	3186d	4cd879515d68 vhost_net: stop device during reset owner
inconsistent lock state in est_fetch_counters net	4	syz, C			5829	3186d	3190d	4/29	3186d	40ca54e3a686 net_sched: gen_estimator: fix lockdep splat
general protection fault in fib6_add (2) net	2	syz, C			3143	3208d	3215d	4/29	3186d	7bbfe00e0252 ipv6: fix general protection fault in fib6_add()
general protection fault in tun_queue_purge net	2	syz, C			4	3191d	3193d	4/29	3186d	9fb582b67072 Revert "net: ptr_ring: otherwise safe empty checks can overrun array bounds"
KASAN: use-after-free Read in __xfrm_state_lookup net	19	syz, C			7	3278d	3277d	4/29	3186d	cb79a180f2e7 xfrm: defer daddr pointer assignment after spi parsing
KASAN: use-after-free Read in erspan_xmit net	19	syz, C			68	3193d	3195d	4/29	3186d	b423d13c08a6 net: erspan: fix use-after-free
WARNING in xdp_rxq_info_unreg bpf net	-1	syz, C			198	3195d	3195d	4/29	3186d	c13da21cdb80 tun: avoid calling xdp_rxq_info_unreg() twice
KASAN: slab-out-of-bounds Read in erspan_xmit net	17	syz, C			51	3193d	3195d	4/29	3186d	b423d13c08a6 net: erspan: fix use-after-free
possible deadlock in rtnl_lock net	4	syz, C			15711	3186d	3242d	4/29	3186d	124da8f6118b tuntap: fix possible deadlock when fail to register netdev
KASAN: slab-out-of-bounds Read in erspan_build_header net	17	syz, C			30	3186d	3195d	4/29	3186d	b423d13c08a6 net: erspan: fix use-after-free
KASAN: use-after-free Read in erspan_build_header net	19	syz, C			60	3186d	3195d	4/29	3186d	b423d13c08a6 net: erspan: fix use-after-free
WARNING in xfrm_state_fini net	-1	syz, C			2231	3202d	3258d	4/29	3187d	6a53b7593233 xfrm: check id proto in validate_tmpl()
KASAN: stack-out-of-bounds Read in xfrm_state_find (3) net	17	syz, C			10353	3191d	3258d	4/29	3187d	732706afe1cc xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.
kernel BUG at net/core/skbuff.c:LINE! (2) net	-1	syz, C			562	3190d	3279d	4/29	3189d	02612bb05e51 pppoe: take ->needed_headroom of lower device into account on xmit
KASAN: slab-out-of-bounds Read in __dev_queue_xmit net	17	syz, C			6	3211d	3199d	4/29	3189d	7c68d1a6b4db net: qdisc_pkt_len_init() should be more robust
KASAN: use-after-free Read in psock_write_space net	19	syz, C			6	3197d	3209d	4/29	3189d	581e7226a5d4 kcm: Only allow TCP sockets to be attached to a KCM mux
possible deadlock in vhost_chr_write_iter kvm net virt	4	syz, C			25952	3193d	3195d	4/29	3189d	e9cb4239134c vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
kernel BUG at net/l2tp/l2tp_ppp.c:LINE! net	-1	syz, C			22	3193d	3215d	4/29	3189d	e5571240236c kcm: Check if sk_user_data already set in kcm_attach
KASAN: use-after-free Read in fib6_add_1 net	19	syz, C			4	3202d	3205d	4/29	3193d	591ff9ea51ce net-backports: ipv6: don't let tb6_root node share routes with other node
suspicious RCU usage at ./include/linux/rcupdate.h:LINE (2) net	-1	syz, C			174	3197d	3276d	4/29	3195d	2f10a61cee8f xfrm: fix rcu usage in xfrm_get_type_offload
general protection fault in strlen net	2	syz, C			53	3198d	3199d	4/29	3195d	cd443f1e91ca netlink: reset extack earlier in netlink_rcv_skb
KASAN: use-after-free Read in fib6_ifup (2) net	19	syz, C			18	3202d	3199d	4/29	3195d	591ff9ea51ce ipv6: don't let tb6_root node share routes with other node
kernel BUG at ./include/linux/skbuff.h:LINE! net	-1	syz, C			4502	3201d	3213d	4/29	3195d	374d1b5a81f7 esp: Fix GRO when the headers not fully in the linear part of the skb.
WARNING in netlink_ack (2) net	-1	syz, C			6	3207d	3207d	4/29	3195d	cbbdf8433a5f netlink: extack needs to be reset each time through loop
KASAN: use-after-free Read in tls_sk_proto_close net	19	syz, C			9	3201d	3208d	4/29	3195d	d91c3e17f75f net/tls: Only attach to sockets in ESTABLISHED state
KASAN: stack-out-of-bounds Read in __nla_put net	17	syz, C			57	3198d	3201d	4/29	3195d	cd443f1e91ca netlink: reset extack earlier in netlink_rcv_skb
KASAN: use-after-free Read in fib6_ifdown net	19	syz, C			26	3202d	3206d	3/29	3199d	4512c43eac7e ipv6: remove null_entry before adding default route
WARNING in strp_data_ready net	-1	syz, C			59034	3215d	3285d	3/29	3200d	d66fa9ec53c4 strparser: Call sock_owned_by_user_nocheck
WARNING in netlink_ack net	-1	syz, C			6	3225d	3226d	3/29	3222d	48044eb490be netlink: fix netlink_ack() extack race
kernel BUG at net/core/dev.c:LINE! net	-1	syz, C			5	3252d	3257d	3/29	3241d	15fe076edea7 net-backports: net/packet: fix a race in packet_bind() and packet_notifier()
BUG: unable to handle kernel paging request in vsock_diag_dump net virt	8	syz, C			6	3282d	3285d	3/29	3251d	c1eef220c176 vsock: always call vsock_init_tables()
WARNING in fib6_add net	-1	syz, C			8225	3268d	3292d	3/29	3251d	2ea2352ede9d ipv6: prevent user from adding cached routes
WARNING in tun_get_user net	-1	syz, C			17398	3268d	3293d	3/29	3251d	010f245b9dd7 net-backports: tun: relax check on eth_get_headlen() return value
KASAN: use-after-free Read in free_netdev net	19	syz, C			42	3268d	3292d	3/29	3251d	aec72f3392b1 net-tun: fix panics at dismantle time
INFO: trying to register non-static key. (2) net	-1	syz, C			8624	3270d	3272d	3/29	3251d	9eba9353388d tcp: fix a lockdep issue in tcp_fastopen_reset_cipher()
KASAN: use-after-free Write in detach_if_pending net	22	syz, C			4169	3288d	3283d	3/29	3251d	ee74d9967b82 tun: do not arm flow_gc_timer in tun_flow_init()
KASAN: stack-out-of-bounds Read in xfrm_state_find (2) net	17	syz, C			93	3269d	3277d	3/29	3261d	c9f3f813d462 xfrm: Fix stack-out-of-bounds read in xfrm_state_find.
INFO: rcu detected stall (2) net	-1	syz, C			56	3268d	3279d	3/29	3268d	93161922c658 net-backports: tun/tap: sanitize TUNSETSNDBUF input
WARNING in reuseport_alloc net	-1	syz, C			408	3268d	3292d	3/29	3268d	1b5f962e71bf soreuseport: fix initialization race
KASAN: use-after-free Read in packet_getsockopt (2) net	19	syz			12	3281d	3290d	3/29	3268d	509c7a1ecc86 packet: avoid panic in packet_getsockopt()
WARNING in kmalloc_slab net	-1	syz, C			22353	3286d	3358d	3/29	3286d	81fbfe8adaf3 ptr_ring: use kmalloc_array()