2025/09/11 01:44:25 extracted 327231 text symbol hashes for base and 327269 for patched 2025/09/11 01:44:25 symbol "ref_set_non_owning.__already_done.638" has different values in base vs patch 2025/09/11 01:44:25 binaries are different, continuing fuzzing 2025/09/11 01:44:25 adding modified_functions to focus areas: ["__add_used_btf" "__add_used_map" "__btf_type_is_scalar_struct" "__check_mem_access" "__check_ptr_off_reg" "__check_reg_arg" "__lookup_instance" "__mark_chain_precision" "__mark_reg_const_zero" "__mark_reg_not_init" "__mark_reg_s32_range" "__mark_reg_unknown" "__pfx___lookup_instance" "__pfx_alloc_frame_masks" "__pfx_bpf_calls_callback" "__pfx_bpf_commit_stack_write_marks" "__pfx_bpf_find_containing_subprog" "__pfx_bpf_fmt_stack_mask" "__pfx_bpf_insn_successors" "__pfx_bpf_jmp_offset" "__pfx_bpf_live_stack_query_init" "__pfx_bpf_mark_stack_read" "__pfx_bpf_mark_stack_write" "__pfx_bpf_reset_live_stack_callchain" "__pfx_bpf_reset_stack_write_marks" "__pfx_bpf_stack_liveness_free" "__pfx_bpf_stack_liveness_init" "__pfx_bpf_stack_slot_alive" "__pfx_bpf_update_live_stack" "__pfx_compute_postorder" "__pfx_is_live_before" "__pfx_log_mask_change" "__pfx_lookup_instance" "__pfx_mark_stack_slot_obj_read" "__process_kf_arg_ptr_to_graph_node" "__process_kf_arg_ptr_to_graph_root" "acquire_reference" "add_kfunc_call" "add_subprog" "add_subprog_and_kfunc" "add_used_map" "adjust_ptr_min_max_vals" "adjust_reg_min_max_vals" "adjust_scalar_min_max_vals" "alloc_frame_masks" "atomic_ptr_type_ok" "bpf_calls_callback" "bpf_check" "bpf_commit_stack_write_marks" "bpf_find_containing_subprog" "bpf_fmt_stack_mask" "bpf_insn_successors" "bpf_jmp_offset" "bpf_live_stack_query_init" "bpf_mark_stack_read" "bpf_mark_stack_write" "bpf_patch_insn_data" "bpf_reset_live_stack_callchain" "bpf_reset_stack_write_marks" "bpf_stack_liveness_free" "bpf_stack_liveness_init" "bpf_stack_slot_alive" "bpf_update_live_stack" "btf_check_subprog_call" "btf_free" "btf_new_fd" "btf_parse_fields" "btf_prepare_func_args" "btf_show_start_type" "check_attach_btf_id" "check_bpf_snprintf_call" "check_btf_info" "check_btf_info_early" "check_buffer_access" "check_cfg" "check_cond_jmp_op" "check_ctx_access" "check_func_arg_reg_off" "check_func_call" "check_get_func_ip" "check_helper_call" "check_helper_mem_access" "check_kfunc_call" "check_kfunc_mem_size_reg" "check_ld_imm" "check_load_mem" "check_map_access" "check_map_func_compatibility" "check_map_kptr_access" "check_mem_access" "check_mem_reg" "check_mem_region_access" "check_mem_size_reg" "check_packet_access" "check_pseudo_btf_id" "check_ptr_alignment" "check_ptr_to_btf_access" "check_ptr_to_map_access" "check_reg_arg" "check_reg_const_str" "check_reg_sane_offset" "check_reg_type" "check_resource_leak" "check_return_code" "check_sock_access" "check_special_kfunc" "check_stack_access_within_bounds" "check_stack_range_initialized" "check_stack_read" "check_stack_write" "check_store_reg" "check_subprogs" "check_tp_buffer_access" "clear_all_pkt_pointers" "clear_caller_saved_regs" "coerce_reg_to_size" "collect_linked_regs" "compute_live_registers" "compute_postorder" "compute_scc" "compute_scc_callchain" "copy_verifier_state" "destroy_if_dynptr_stack_slot" "do_check" "do_check_common" "do_check_subprogs" "do_refine_retval_range" "dynptr_get_type" "dynptr_id" "dynptr_ref_obj_id" "fetch_kfunc_meta" "find_good_pkt_pointers" "find_kfunc_desc_btf" "find_prev_entry" "find_subprog" "fixup_kfunc_call" "format_callchain" "free_verifier_state" "get_constant_map_key" "get_dynptr_arg_reg" "in_rbtree_lock_required_cb" "incomplete_read_marks" "init_func_state" "invalidate_dynptr" "invalidate_non_owning_refs" "is_live_before" "is_pointer_value" "log_mask_change" "lookup_instance" "map_kptr_match_type" "map_set_for_each_callback_args" "mark_all_scalars_precise" "mark_btf_func_reg_size" "mark_btf_ld_reg" "mark_fastcall_patterns" "mark_ptr_or_null_reg" "mark_ptr_or_null_regs" "mark_reg_invalid" "mark_reg_known_zero" "mark_reg_not_init" "mark_reg_stack_read" "mark_reg_unknown" "mark_stack_slot_obj_read" "mark_subprog_might_sleep" "may_update_sockmap" "maybe_widen_reg" "print_insn_state" "print_reg_state" "print_verifier_state" "process_bpf_exit_full" "process_dynptr_func" "process_irq_flag" "process_iter_arg" "process_iter_next_call" "process_kf_arg_ptr_to_btf_id" "process_kptr_func" "process_spin_lock" "process_timer_func" "process_wq_func" "propagate_precision" "push_callback_call" "push_insn" "push_jmp_history" "push_stack" "record_func_key" "record_func_map" "ref_convert_owning_non_owning" "reg_bounds_sync" "reg_set_min_max" "reg_type_str" "regsafe" "release_reference" "resolve_pseudo_ldimm64" "sanitize_check_bounds" "sanitize_err" "sanitize_ptr_alu" "sanitize_speculative_path" "save_aux_ptr_type" "scalar_reg_for_stack" "set_callee_state" "set_find_vma_callback_state" "set_loop_callback_state" "set_map_elem_callback_state" "set_rbtree_add_callback_state" "set_timer_callback_state" "set_user_ringbuf_callback_state" "setup_func_entry" "stack_slot_obj_get_spi" "states_equal" "sync_linked_regs" "try_match_pkt_pointers" "unbound_reg_init" "unmark_stack_slots_dynptr" "unmark_stack_slots_iter" "update_loop_inline_state" "verbose_invalid_scalar" "verifier_remove_insns" "visit_func_call_insn" "widen_imprecise_scalars"] 2025/09/11 01:44:25 adding directly modified files to focus areas: ["Documentation/bpf/verifier.rst" "include/linux/bpf_verifier.h" "kernel/bpf/Makefile" "kernel/bpf/liveness.c" "kernel/bpf/log.c" "kernel/bpf/verifier.c" "tools/testing/selftests/bpf/prog_tests/align.c" "tools/testing/selftests/bpf/prog_tests/spin_lock.c" "tools/testing/selftests/bpf/prog_tests/test_veristat.c" "tools/testing/selftests/bpf/progs/exceptions_assert.c" "tools/testing/selftests/bpf/progs/iters_state_safety.c" "tools/testing/selftests/bpf/progs/iters_testmod_seq.c" "tools/testing/selftests/bpf/progs/mem_rdonly_untrusted.c" "tools/testing/selftests/bpf/progs/verifier_bounds.c" "tools/testing/selftests/bpf/progs/verifier_global_ptr_args.c" "tools/testing/selftests/bpf/progs/verifier_ldsx.c" "tools/testing/selftests/bpf/progs/verifier_precision.c" "tools/testing/selftests/bpf/progs/verifier_scalar_ids.c" "tools/testing/selftests/bpf/progs/verifier_spill_fill.c" "tools/testing/selftests/bpf/progs/verifier_subprog_precision.c" "tools/testing/selftests/bpf/verifier/bpf_st_mem.c"] 2025/09/11 01:44:25 downloaded the corpus from https://storage.googleapis.com/syzkaller/corpus/ci-upstream-bpf-kasan-gce-corpus.db 2025/09/11 01:45:14 runner 9 connected 2025/09/11 01:45:15 runner 0 connected 2025/09/11 01:45:15 runner 1 connected 2025/09/11 01:45:15 runner 2 connected 2025/09/11 01:45:15 runner 6 connected 2025/09/11 01:45:15 runner 2 connected 2025/09/11 01:45:16 runner 4 connected 2025/09/11 01:45:16 runner 5 connected 2025/09/11 01:45:16 runner 3 connected 2025/09/11 01:45:17 runner 0 connected 2025/09/11 01:45:17 runner 1 connected 2025/09/11 01:45:21 initializing coverage information... 2025/09/11 01:45:22 executor cover filter: 0 PCs 2025/09/11 01:45:23 runner 3 connected 2025/09/11 01:45:23 runner 7 connected 2025/09/11 01:45:24 machine check: disabled the following syscalls: socket$hf : socket$hf(0x13, 0x2, 0x0) failed: address family not supported by protocol socket$inet6_dccp : socket$inet6_dccp(0xa, 0x6, 0x0) failed: socket type not supported socket$inet_dccp : socket$inet_dccp(0x2, 0x6, 0x0) failed: socket type not supported socket$vsock_dgram : socket$vsock_dgram(0x28, 0x2, 0x0) failed: no such device transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] recvmsg$hf : sock_hf [socket$hf] recvmsg$inet_nvme : nvme_sock [syz_socket_connect_nvme_tcp] sendmsg$802154_dgram : sock_802154_dgram [syz_init_net_socket$802154_dgram] sendmsg$802154_raw : sock_802154_raw [syz_init_net_socket$802154_raw] sendmsg$BATADV_CMD_GET_BLA_BACKBONE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_BLA_CLAIM : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_DAT_CACHE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_GATEWAYS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MCAST_FLAGS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_NEIGHBORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ORIGINATORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ROUTING_ALGOS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER_CANCEL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$DEVLINK_CMD_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_UNSPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_DEL : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_NEW : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RELOAD : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$ETHTOOL_MSG_CHANNELS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_CHANNELS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKSTATE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_STRSET_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_TSINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$FOU_CMD_ADD : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_DEL : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_GET : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$GTP_CMD_DELPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_ECHOREQ : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_GETPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_NEWPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$IEEE802154_ADD_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_RESP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_DISASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_GETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_SETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SCAN_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SET_MACPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_START_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IPVS_CMD_DEL_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_FLUSH : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_ZERO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$L2TP_CMD_NOOP : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$MPTCP_PM_CMD_ADD_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_ANNOUNCE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_DEL_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_REMOVE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_FLAGS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$NBD_CMD_CONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_DISCONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_RECONFIGURE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_STATUS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_START : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_STOP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DISABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ENABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_FW_DOWNLOAD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_DEVICE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_GET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SDREQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_SE_IO : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_START_POLL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_VENDOR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL80211_CMD_ABORT_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_AUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONTROL_PORT_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEAUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISCONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_EXTERNAL_AUTH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FLUSH_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SURVEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NOTIFY_RADAR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PEER_MEASUREMENT_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_CLIENT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_MESH_LINK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RADAR_DETECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_BEACONS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RELOAD_REGDB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REQ_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BEACON : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CQM : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MAC_ACL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MCAST_RATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_NOACK_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_QOS_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TID_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WDS_PEER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY_NETNS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_MGMT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_OPER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TESTMODE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TRIGGER_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UNEXPECTED_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_FT_IES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_OWE_INFO : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_VENDOR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL802154_CMD_DEL_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_WPAN_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CHANNEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_LBT_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_PAN_ID : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SEC_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SHORT_ADDR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_TX_POWER : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_PROTOCOLS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_VERSION : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_ACCEPT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$SEG6_CMD_DUMPHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_GET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SETHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SMC_PNETID_ADD : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_DEL : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_FLUSH : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_GET : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$TEAM_CMD_NOOP : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_SET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_PORT_LIST_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TIPC_CMD_DISABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_ENABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_BEARER_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_LINKS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MAX_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MEDIA_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NODES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_REMOTE_MNG : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_RESET_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_PRI : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_TOL : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_WINDOW : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NODE_ADDR : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_NAME_TABLE : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_NL_BEARER_ADD : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_DISABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_ENABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_FLUSH : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_RESET_STATS : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_PEER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NAME_TABLE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NODE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PEER_REMOVE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PUBL_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_SOCK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_UDP_GET_REMOTEIP : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$WG_CMD_GET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$WG_CMD_SET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$alg : sock_algconn [accept$alg accept4$alg] sendmsg$can_bcm : timespec [clock_gettime] sendmsg$hf : sock_hf [socket$hf] sendmsg$nfc_llcp : sock_nfc_llcp [accept$nfc_llcp accept4$nfc_llcp syz_init_net_socket$nfc_llcp] sendmsg$nl_route : ifindex_vcan [ioctl$ifreq_SIOCGIFINDEX_vcan] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 311/8054 2025/09/11 01:45:24 base: machine check complete 2025/09/11 01:45:24 discovered 7700 source files, 338668 symbols 2025/09/11 01:45:26 coverage filter: __add_used_btf: [__add_used_btf] 2025/09/11 01:45:26 coverage filter: __add_used_map: [__add_used_map] 2025/09/11 01:45:26 coverage filter: __btf_type_is_scalar_struct: [__btf_type_is_scalar_struct] 2025/09/11 01:45:26 coverage filter: __check_mem_access: [__check_mem_access] 2025/09/11 01:45:26 coverage filter: __check_ptr_off_reg: [__check_ptr_off_reg] 2025/09/11 01:45:26 coverage filter: __check_reg_arg: [__check_reg_arg] 2025/09/11 01:45:26 coverage filter: __lookup_instance: [__lookup_instance] 2025/09/11 01:45:26 coverage filter: __mark_chain_precision: [__mark_chain_precision] 2025/09/11 01:45:26 coverage filter: __mark_reg_const_zero: [__mark_reg_const_zero] 2025/09/11 01:45:26 coverage filter: __mark_reg_not_init: [__mark_reg_not_init] 2025/09/11 01:45:26 coverage filter: __mark_reg_s32_range: [__mark_reg_s32_range] 2025/09/11 01:45:26 coverage filter: __mark_reg_unknown: [__mark_reg_unknown] 2025/09/11 01:45:26 coverage filter: __pfx___lookup_instance: [] 2025/09/11 01:45:26 coverage filter: __pfx_alloc_frame_masks: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_calls_callback: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_commit_stack_write_marks: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_find_containing_subprog: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_fmt_stack_mask: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_insn_successors: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_jmp_offset: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_live_stack_query_init: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_mark_stack_read: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_mark_stack_write: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_reset_live_stack_callchain: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_reset_stack_write_marks: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_stack_liveness_free: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_stack_liveness_init: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_stack_slot_alive: [] 2025/09/11 01:45:26 coverage filter: __pfx_bpf_update_live_stack: [] 2025/09/11 01:45:26 coverage filter: __pfx_compute_postorder: [] 2025/09/11 01:45:26 coverage filter: __pfx_is_live_before: [] 2025/09/11 01:45:26 coverage filter: __pfx_log_mask_change: [] 2025/09/11 01:45:26 coverage filter: __pfx_lookup_instance: [] 2025/09/11 01:45:26 coverage filter: __pfx_mark_stack_slot_obj_read: [] 2025/09/11 01:45:26 coverage filter: __process_kf_arg_ptr_to_graph_node: [__process_kf_arg_ptr_to_graph_node] 2025/09/11 01:45:26 coverage filter: __process_kf_arg_ptr_to_graph_root: [__process_kf_arg_ptr_to_graph_root] 2025/09/11 01:45:26 coverage filter: acquire_reference: [acquire_reference] 2025/09/11 01:45:26 coverage filter: add_kfunc_call: [add_kfunc_call] 2025/09/11 01:45:26 coverage filter: add_subprog: [add_subprog add_subprog_and_kfunc] 2025/09/11 01:45:26 coverage filter: add_subprog_and_kfunc: [] 2025/09/11 01:45:26 coverage filter: add_used_map: [add_used_map] 2025/09/11 01:45:26 coverage filter: adjust_ptr_min_max_vals: [adjust_ptr_min_max_vals] 2025/09/11 01:45:26 coverage filter: adjust_reg_min_max_vals: [adjust_reg_min_max_vals] 2025/09/11 01:45:26 coverage filter: adjust_scalar_min_max_vals: [adjust_scalar_min_max_vals] 2025/09/11 01:45:26 coverage filter: alloc_frame_masks: [alloc_frame_masks] 2025/09/11 01:45:26 coverage filter: atomic_ptr_type_ok: [atomic_ptr_type_ok] 2025/09/11 01:45:26 coverage filter: bpf_calls_callback: [bpf_calls_callback] 2025/09/11 01:45:26 coverage filter: bpf_check: [bpf_check bpf_check_attach_target bpf_check_timed_may_goto bpf_check_uarg_tail_zero cookie_bpf_check] 2025/09/11 01:45:26 coverage filter: bpf_commit_stack_write_marks: [bpf_commit_stack_write_marks] 2025/09/11 01:45:26 coverage filter: bpf_find_containing_subprog: [bpf_find_containing_subprog] 2025/09/11 01:45:26 coverage filter: bpf_fmt_stack_mask: [bpf_fmt_stack_mask] 2025/09/11 01:45:26 coverage filter: bpf_insn_successors: [bpf_insn_successors] 2025/09/11 01:45:26 coverage filter: bpf_jmp_offset: [bpf_jmp_offset] 2025/09/11 01:45:26 coverage filter: bpf_live_stack_query_init: [bpf_live_stack_query_init] 2025/09/11 01:45:26 coverage filter: bpf_mark_stack_read: [bpf_mark_stack_read] 2025/09/11 01:45:26 coverage filter: bpf_mark_stack_write: [bpf_mark_stack_write] 2025/09/11 01:45:26 coverage filter: bpf_patch_insn_data: [bpf_patch_insn_data] 2025/09/11 01:45:26 coverage filter: bpf_reset_live_stack_callchain: [bpf_reset_live_stack_callchain] 2025/09/11 01:45:26 coverage filter: bpf_reset_stack_write_marks: [bpf_reset_stack_write_marks] 2025/09/11 01:45:26 coverage filter: bpf_stack_liveness_free: [bpf_stack_liveness_free] 2025/09/11 01:45:26 coverage filter: bpf_stack_liveness_init: [bpf_stack_liveness_init] 2025/09/11 01:45:26 coverage filter: bpf_stack_slot_alive: [bpf_stack_slot_alive] 2025/09/11 01:45:26 coverage filter: bpf_update_live_stack: [bpf_update_live_stack] 2025/09/11 01:45:26 coverage filter: btf_check_subprog_call: [btf_check_subprog_call] 2025/09/11 01:45:26 coverage filter: btf_free: [btf_free btf_free_kfunc_set_tab btf_free_rcu btf_free_struct_meta_tab] 2025/09/11 01:45:26 coverage filter: btf_new_fd: [btf_new_fd] 2025/09/11 01:45:26 coverage filter: btf_parse_fields: [btf_parse_fields] 2025/09/11 01:45:26 coverage filter: btf_prepare_func_args: [btf_prepare_func_args] 2025/09/11 01:45:26 coverage filter: btf_show_start_type: [btf_show_start_type] 2025/09/11 01:45:26 coverage filter: check_attach_btf_id: [check_attach_btf_id] 2025/09/11 01:45:26 coverage filter: check_bpf_snprintf_call: [check_bpf_snprintf_call] 2025/09/11 01:45:26 coverage filter: check_btf_info: [check_btf_info check_btf_info_early] 2025/09/11 01:45:26 coverage filter: check_btf_info_early: [] 2025/09/11 01:45:26 coverage filter: check_buffer_access: [check_buffer_access] 2025/09/11 01:45:26 coverage filter: check_cfg: [check_cfg] 2025/09/11 01:45:26 coverage filter: check_cond_jmp_op: [check_cond_jmp_op] 2025/09/11 01:45:26 coverage filter: check_ctx_access: [check_ctx_access] 2025/09/11 01:45:26 coverage filter: check_func_arg_reg_off: [check_func_arg_reg_off] 2025/09/11 01:45:26 coverage filter: check_func_call: [check_func_call] 2025/09/11 01:45:26 coverage filter: check_get_func_ip: [check_get_func_ip] 2025/09/11 01:45:26 coverage filter: check_helper_call: [check_helper_call] 2025/09/11 01:45:26 coverage filter: check_helper_mem_access: [check_helper_mem_access] 2025/09/11 01:45:26 coverage filter: check_kfunc_call: [check_kfunc_call] 2025/09/11 01:45:26 coverage filter: check_kfunc_mem_size_reg: [check_kfunc_mem_size_reg] 2025/09/11 01:45:26 coverage filter: check_ld_imm: [check_ld_imm] 2025/09/11 01:45:26 coverage filter: check_load_mem: [check_load_mem] 2025/09/11 01:45:26 coverage filter: check_map_access: [check_map_access] 2025/09/11 01:45:26 coverage filter: check_map_func_compatibility: [check_map_func_compatibility] 2025/09/11 01:45:26 coverage filter: check_map_kptr_access: [check_map_kptr_access] 2025/09/11 01:45:26 coverage filter: check_mem_access: [check_mem_access] 2025/09/11 01:45:26 coverage filter: check_mem_reg: [check_mem_reg check_mem_region_access] 2025/09/11 01:45:26 coverage filter: check_mem_region_access: [] 2025/09/11 01:45:26 coverage filter: check_mem_size_reg: [check_mem_size_reg] 2025/09/11 01:45:26 coverage filter: check_packet_access: [check_packet_access] 2025/09/11 01:45:26 coverage filter: check_pseudo_btf_id: [check_pseudo_btf_id] 2025/09/11 01:45:26 coverage filter: check_ptr_alignment: [check_ptr_alignment] 2025/09/11 01:45:26 coverage filter: check_ptr_to_btf_access: [check_ptr_to_btf_access] 2025/09/11 01:45:26 coverage filter: check_ptr_to_map_access: [check_ptr_to_map_access] 2025/09/11 01:45:26 coverage filter: check_reg_arg: [check_reg_arg] 2025/09/11 01:45:26 coverage filter: check_reg_const_str: [check_reg_const_str] 2025/09/11 01:45:26 coverage filter: check_reg_sane_offset: [check_reg_sane_offset] 2025/09/11 01:45:26 coverage filter: check_reg_type: [check_reg_type] 2025/09/11 01:45:26 coverage filter: check_resource_leak: [check_resource_leak] 2025/09/11 01:45:26 coverage filter: check_return_code: [check_return_code] 2025/09/11 01:45:26 coverage filter: check_sock_access: [check_sock_access] 2025/09/11 01:45:26 coverage filter: check_special_kfunc: [check_special_kfunc] 2025/09/11 01:45:26 coverage filter: check_stack_access_within_bounds: [check_stack_access_within_bounds] 2025/09/11 01:45:26 coverage filter: check_stack_range_initialized: [check_stack_range_initialized] 2025/09/11 01:45:26 coverage filter: check_stack_read: [check_stack_read] 2025/09/11 01:45:26 coverage filter: check_stack_write: [check_stack_write] 2025/09/11 01:45:26 coverage filter: check_store_reg: [check_store_reg] 2025/09/11 01:45:26 coverage filter: check_subprogs: [check_subprogs do_check_subprogs] 2025/09/11 01:45:26 coverage filter: check_tp_buffer_access: [check_tp_buffer_access] 2025/09/11 01:45:26 coverage filter: clear_all_pkt_pointers: [clear_all_pkt_pointers] 2025/09/11 01:45:26 coverage filter: clear_caller_saved_regs: [clear_caller_saved_regs] 2025/09/11 01:45:26 coverage filter: coerce_reg_to_size: [coerce_reg_to_size coerce_reg_to_size_sx] 2025/09/11 01:45:26 coverage filter: collect_linked_regs: [collect_linked_regs] 2025/09/11 01:45:26 coverage filter: compute_live_registers: [compute_live_registers] 2025/09/11 01:45:26 coverage filter: compute_postorder: [compute_postorder] 2025/09/11 01:45:26 coverage filter: compute_scc: [compute_scc compute_scc_callchain] 2025/09/11 01:45:26 coverage filter: compute_scc_callchain: [] 2025/09/11 01:45:26 coverage filter: copy_verifier_state: [copy_verifier_state] 2025/09/11 01:45:26 coverage filter: destroy_if_dynptr_stack_slot: [destroy_if_dynptr_stack_slot] 2025/09/11 01:45:26 coverage filter: do_check: [do_check do_check_common do_checkpoint jbd2_log_do_checkpoint nfs4_do_check_delegation xdp_do_check_flushed] 2025/09/11 01:45:26 coverage filter: do_check_common: [] 2025/09/11 01:45:26 coverage filter: do_check_subprogs: [] 2025/09/11 01:45:26 coverage filter: do_refine_retval_range: [do_refine_retval_range] 2025/09/11 01:45:26 coverage filter: dynptr_get_type: [dynptr_get_type] 2025/09/11 01:45:26 coverage filter: dynptr_id: [dynptr_id] 2025/09/11 01:45:26 coverage filter: dynptr_ref_obj_id: [dynptr_ref_obj_id] 2025/09/11 01:45:26 coverage filter: fetch_kfunc_meta: [fetch_kfunc_meta] 2025/09/11 01:45:26 coverage filter: find_good_pkt_pointers: [find_good_pkt_pointers] 2025/09/11 01:45:26 coverage filter: find_kfunc_desc_btf: [find_kfunc_desc_btf] 2025/09/11 01:45:26 coverage filter: find_prev_entry: [find_prev_entry] 2025/09/11 01:45:26 coverage filter: find_subprog: [find_subprog] 2025/09/11 01:45:26 coverage filter: fixup_kfunc_call: [fixup_kfunc_call] 2025/09/11 01:45:26 coverage filter: format_callchain: [format_callchain] 2025/09/11 01:45:26 coverage filter: free_verifier_state: [free_verifier_state] 2025/09/11 01:45:26 coverage filter: get_constant_map_key: [get_constant_map_key] 2025/09/11 01:45:26 coverage filter: get_dynptr_arg_reg: [get_dynptr_arg_reg] 2025/09/11 01:45:26 coverage filter: in_rbtree_lock_required_cb: [in_rbtree_lock_required_cb] 2025/09/11 01:45:26 coverage filter: incomplete_read_marks: [incomplete_read_marks] 2025/09/11 01:45:26 coverage filter: init_func_state: [init_func_state] 2025/09/11 01:45:26 coverage filter: invalidate_dynptr: [invalidate_dynptr] 2025/09/11 01:45:26 coverage filter: invalidate_non_owning_refs: [invalidate_non_owning_refs] 2025/09/11 01:45:26 coverage filter: is_live_before: [is_live_before] 2025/09/11 01:45:26 coverage filter: is_pointer_value: [is_pointer_value] 2025/09/11 01:45:26 coverage filter: log_mask_change: [log_mask_change] 2025/09/11 01:45:26 coverage filter: lookup_instance: [lookup_instance] 2025/09/11 01:45:26 coverage filter: map_kptr_match_type: [map_kptr_match_type] 2025/09/11 01:45:26 coverage filter: map_set_for_each_callback_args: [map_set_for_each_callback_args] 2025/09/11 01:45:26 coverage filter: mark_all_scalars_precise: [mark_all_scalars_precise] 2025/09/11 01:45:26 coverage filter: mark_btf_func_reg_size: [mark_btf_func_reg_size] 2025/09/11 01:45:26 coverage filter: mark_btf_ld_reg: [mark_btf_ld_reg] 2025/09/11 01:45:26 coverage filter: mark_fastcall_patterns: [mark_fastcall_patterns] 2025/09/11 01:45:26 coverage filter: mark_ptr_or_null_reg: [mark_ptr_or_null_reg mark_ptr_or_null_regs] 2025/09/11 01:45:26 coverage filter: mark_ptr_or_null_regs: [] 2025/09/11 01:45:26 coverage filter: mark_reg_invalid: [mark_reg_invalid] 2025/09/11 01:45:26 coverage filter: mark_reg_known_zero: [mark_reg_known_zero] 2025/09/11 01:45:26 coverage filter: mark_reg_not_init: [mark_reg_not_init] 2025/09/11 01:45:26 coverage filter: mark_reg_stack_read: [mark_reg_stack_read] 2025/09/11 01:45:26 coverage filter: mark_reg_unknown: [mark_reg_unknown] 2025/09/11 01:45:26 coverage filter: mark_stack_slot_obj_read: [mark_stack_slot_obj_read] 2025/09/11 01:45:26 coverage filter: mark_subprog_might_sleep: [mark_subprog_might_sleep] 2025/09/11 01:45:26 coverage filter: may_update_sockmap: [may_update_sockmap] 2025/09/11 01:45:26 coverage filter: maybe_widen_reg: [maybe_widen_reg] 2025/09/11 01:45:26 coverage filter: print_insn_state: [print_insn_state] 2025/09/11 01:45:26 coverage filter: print_reg_state: [print_reg_state] 2025/09/11 01:45:26 coverage filter: print_verifier_state: [print_verifier_state] 2025/09/11 01:45:26 coverage filter: process_bpf_exit_full: [process_bpf_exit_full] 2025/09/11 01:45:26 coverage filter: process_dynptr_func: [process_dynptr_func] 2025/09/11 01:45:26 coverage filter: process_irq_flag: [process_irq_flag] 2025/09/11 01:45:26 coverage filter: process_iter_arg: [process_iter_arg] 2025/09/11 01:45:26 coverage filter: process_iter_next_call: [process_iter_next_call] 2025/09/11 01:45:26 coverage filter: process_kf_arg_ptr_to_btf_id: [process_kf_arg_ptr_to_btf_id] 2025/09/11 01:45:26 coverage filter: process_kptr_func: [process_kptr_func] 2025/09/11 01:45:26 coverage filter: process_spin_lock: [process_spin_lock] 2025/09/11 01:45:26 coverage filter: process_timer_func: [process_timer_func] 2025/09/11 01:45:26 coverage filter: process_wq_func: [process_wq_func] 2025/09/11 01:45:26 coverage filter: propagate_precision: [propagate_precision] 2025/09/11 01:45:26 coverage filter: push_callback_call: [push_callback_call] 2025/09/11 01:45:26 coverage filter: push_insn: [push_insn] 2025/09/11 01:45:26 coverage filter: push_jmp_history: [push_jmp_history] 2025/09/11 01:45:26 coverage filter: push_stack: [push_stack] 2025/09/11 01:45:26 coverage filter: record_func_key: [record_func_key] 2025/09/11 01:45:26 coverage filter: record_func_map: [record_func_map] 2025/09/11 01:45:26 coverage filter: ref_convert_owning_non_owning: [ref_convert_owning_non_owning] 2025/09/11 01:45:26 coverage filter: reg_bounds_sync: [reg_bounds_sync] 2025/09/11 01:45:26 coverage filter: reg_set_min_max: [reg_set_min_max] 2025/09/11 01:45:26 coverage filter: reg_type_str: [reg_type_str] 2025/09/11 01:45:26 coverage filter: regsafe: [regsafe] 2025/09/11 01:45:26 coverage filter: release_reference: [release_reference release_reference_nomark release_reference_state release_references] 2025/09/11 01:45:26 coverage filter: resolve_pseudo_ldimm64: [resolve_pseudo_ldimm64] 2025/09/11 01:45:26 coverage filter: sanitize_check_bounds: [sanitize_check_bounds] 2025/09/11 01:45:26 coverage filter: sanitize_err: [sanitize_err] 2025/09/11 01:45:26 coverage filter: sanitize_ptr_alu: [sanitize_ptr_alu] 2025/09/11 01:45:26 coverage filter: sanitize_speculative_path: [sanitize_speculative_path] 2025/09/11 01:45:26 coverage filter: save_aux_ptr_type: [save_aux_ptr_type] 2025/09/11 01:45:26 coverage filter: scalar_reg_for_stack: [scalar_reg_for_stack] 2025/09/11 01:45:26 coverage filter: set_callee_state: [set_callee_state] 2025/09/11 01:45:26 coverage filter: set_find_vma_callback_state: [set_find_vma_callback_state] 2025/09/11 01:45:26 coverage filter: set_loop_callback_state: [set_loop_callback_state] 2025/09/11 01:45:26 coverage filter: set_map_elem_callback_state: [set_map_elem_callback_state] 2025/09/11 01:45:26 coverage filter: set_rbtree_add_callback_state: [set_rbtree_add_callback_state] 2025/09/11 01:45:26 coverage filter: set_timer_callback_state: [set_timer_callback_state] 2025/09/11 01:45:26 coverage filter: set_user_ringbuf_callback_state: [set_user_ringbuf_callback_state] 2025/09/11 01:45:26 coverage filter: setup_func_entry: [setup_func_entry] 2025/09/11 01:45:26 coverage filter: stack_slot_obj_get_spi: [stack_slot_obj_get_spi] 2025/09/11 01:45:26 coverage filter: states_equal: [states_equal] 2025/09/11 01:45:26 coverage filter: sync_linked_regs: [bt_sync_linked_regs sync_linked_regs] 2025/09/11 01:45:26 coverage filter: try_match_pkt_pointers: [try_match_pkt_pointers] 2025/09/11 01:45:26 coverage filter: unbound_reg_init: [] 2025/09/11 01:45:26 coverage filter: unmark_stack_slots_dynptr: [unmark_stack_slots_dynptr] 2025/09/11 01:45:26 coverage filter: unmark_stack_slots_iter: [unmark_stack_slots_iter] 2025/09/11 01:45:26 coverage filter: update_loop_inline_state: [update_loop_inline_state] 2025/09/11 01:45:26 coverage filter: verbose_invalid_scalar: [verbose_invalid_scalar] 2025/09/11 01:45:26 coverage filter: verifier_remove_insns: [verifier_remove_insns] 2025/09/11 01:45:26 coverage filter: visit_func_call_insn: [visit_func_call_insn] 2025/09/11 01:45:26 coverage filter: widen_imprecise_scalars: [widen_imprecise_scalars] 2025/09/11 01:45:26 coverage filter: Documentation/bpf/verifier.rst: [] 2025/09/11 01:45:26 coverage filter: include/linux/bpf_verifier.h: [] 2025/09/11 01:45:26 coverage filter: kernel/bpf/Makefile: [] 2025/09/11 01:45:26 coverage filter: kernel/bpf/liveness.c: [kernel/bpf/liveness.c] 2025/09/11 01:45:26 coverage filter: kernel/bpf/log.c: [kernel/bpf/log.c] 2025/09/11 01:45:26 coverage filter: kernel/bpf/verifier.c: [kernel/bpf/verifier.c] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/prog_tests/align.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/prog_tests/spin_lock.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/prog_tests/test_veristat.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/exceptions_assert.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/iters_state_safety.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/iters_testmod_seq.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/mem_rdonly_untrusted.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/verifier_bounds.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/verifier_global_ptr_args.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/verifier_ldsx.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/verifier_precision.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/verifier_scalar_ids.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/verifier_spill_fill.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/progs/verifier_subprog_precision.c: [] 2025/09/11 01:45:26 coverage filter: tools/testing/selftests/bpf/verifier/bpf_st_mem.c: [] 2025/09/11 01:45:26 area "symbols": 12265 PCs in the cover filter 2025/09/11 01:45:26 area "files": 12746 PCs in the cover filter 2025/09/11 01:45:26 area "": 0 PCs in the cover filter 2025/09/11 01:45:26 executor cover filter: 0 PCs 2025/09/11 01:45:27 machine check: disabled the following syscalls: socket$hf : socket$hf(0x13, 0x2, 0x0) failed: address family not supported by protocol socket$inet6_dccp : socket$inet6_dccp(0xa, 0x6, 0x0) failed: socket type not supported socket$inet_dccp : socket$inet_dccp(0x2, 0x6, 0x0) failed: socket type not supported socket$vsock_dgram : socket$vsock_dgram(0x28, 0x2, 0x0) failed: no such device transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] recvmsg$hf : sock_hf [socket$hf] recvmsg$inet_nvme : nvme_sock [syz_socket_connect_nvme_tcp] sendmsg$802154_dgram : sock_802154_dgram [syz_init_net_socket$802154_dgram] sendmsg$802154_raw : sock_802154_raw [syz_init_net_socket$802154_raw] sendmsg$BATADV_CMD_GET_BLA_BACKBONE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_BLA_CLAIM : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_DAT_CACHE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_GATEWAYS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MCAST_FLAGS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_NEIGHBORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ORIGINATORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ROUTING_ALGOS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER_CANCEL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$DEVLINK_CMD_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_UNSPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_DEL : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_NEW : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RELOAD : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$ETHTOOL_MSG_CHANNELS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_CHANNELS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKSTATE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_STRSET_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_TSINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$FOU_CMD_ADD : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_DEL : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_GET : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$GTP_CMD_DELPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_ECHOREQ : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_GETPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_NEWPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$IEEE802154_ADD_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_RESP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_DISASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_GETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_SETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SCAN_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SET_MACPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_START_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IPVS_CMD_DEL_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_FLUSH : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_ZERO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$L2TP_CMD_NOOP : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$MPTCP_PM_CMD_ADD_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_ANNOUNCE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_DEL_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_REMOVE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_FLAGS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$NBD_CMD_CONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_DISCONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_RECONFIGURE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_STATUS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_START : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_STOP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DISABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ENABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_FW_DOWNLOAD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_DEVICE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_GET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SDREQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_SE_IO : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_START_POLL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_VENDOR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL80211_CMD_ABORT_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_AUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONTROL_PORT_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEAUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISCONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_EXTERNAL_AUTH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FLUSH_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SURVEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NOTIFY_RADAR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PEER_MEASUREMENT_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_CLIENT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_MESH_LINK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RADAR_DETECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_BEACONS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RELOAD_REGDB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REQ_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BEACON : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CQM : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MAC_ACL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MCAST_RATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_NOACK_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_QOS_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TID_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WDS_PEER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY_NETNS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_MGMT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_OPER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TESTMODE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TRIGGER_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UNEXPECTED_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_FT_IES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_OWE_INFO : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_VENDOR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL802154_CMD_DEL_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_WPAN_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CHANNEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_LBT_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_PAN_ID : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SEC_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SHORT_ADDR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_TX_POWER : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_PROTOCOLS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_VERSION : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_ACCEPT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$SEG6_CMD_DUMPHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_GET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SETHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SMC_PNETID_ADD : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_DEL : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_FLUSH : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_GET : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$TEAM_CMD_NOOP : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_SET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_PORT_LIST_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TIPC_CMD_DISABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_ENABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_BEARER_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_LINKS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MAX_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MEDIA_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NODES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_REMOTE_MNG : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_RESET_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_PRI : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_TOL : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_WINDOW : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NODE_ADDR : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_NAME_TABLE : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_NL_BEARER_ADD : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_DISABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_ENABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_FLUSH : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_RESET_STATS : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_PEER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NAME_TABLE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NODE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PEER_REMOVE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PUBL_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_SOCK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_UDP_GET_REMOTEIP : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$WG_CMD_GET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$WG_CMD_SET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$alg : sock_algconn [accept$alg accept4$alg] sendmsg$can_bcm : timespec [clock_gettime] sendmsg$hf : sock_hf [socket$hf] sendmsg$nfc_llcp : sock_nfc_llcp [accept$nfc_llcp accept4$nfc_llcp syz_init_net_socket$nfc_llcp] sendmsg$nl_route : ifindex_vcan [ioctl$ifreq_SIOCGIFINDEX_vcan] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 311/8054 2025/09/11 01:45:27 new: machine check complete 2025/09/11 01:45:27 new: adding 29665 seeds 2025/09/11 01:46:16 base crash "WARNING in xfrm_state_fini" is already known 2025/09/11 01:46:16 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:46:23 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 01:46:39 base crash "WARNING in xfrm_state_fini" is already known 2025/09/11 01:46:39 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:46:40 base crash "WARNING in xfrm_state_fini" is already known 2025/09/11 01:46:40 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:46:49 base crash: WARNING in xfrm_state_fini 2025/09/11 01:46:52 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:47:05 runner 7 connected 2025/09/11 01:47:12 runner 6 connected 2025/09/11 01:47:13 base crash: WARNING in xfrm_state_fini 2025/09/11 01:47:29 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:47:29 runner 5 connected 2025/09/11 01:47:35 patched crashed: INFO: rcu detected stall in perf_event_open [need repro = false] 2025/09/11 01:47:39 runner 2 connected 2025/09/11 01:47:45 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/11 01:47:46 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:47:51 base crash: WARNING in xfrm_state_fini 2025/09/11 01:48:02 runner 1 connected 2025/09/11 01:48:17 runner 3 connected 2025/09/11 01:48:23 runner 1 connected 2025/09/11 01:48:33 runner 2 connected 2025/09/11 01:48:34 runner 3 connected 2025/09/11 01:48:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:48:42 runner 0 connected 2025/09/11 01:48:49 base crash: WARNING in xfrm_state_fini 2025/09/11 01:49:23 runner 0 connected 2025/09/11 01:49:26 STAT { "buffer too small": 0, "candidate triage jobs": 49, "candidates": 25800, "comps overflows": 0, "corpus": 3780, "corpus [files]": 747, "corpus [symbols]": 757, "cover overflows": 702, "coverage": 69508, "distributor delayed": 7245, "distributor undelayed": 7240, "distributor violated": 157, "exec candidate": 3865, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 10, "exec seeds": 0, "exec smash": 0, "exec total [base]": 8042, "exec total [new]": 16810, "exec triage": 11956, "executor restarts [base]": 59, "executor restarts [new]": 106, "fault jobs": 0, "fuzzer jobs": 49, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 70604, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 3865, "no exec duration": 27870000000, "no exec requests": 66, "pending": 0, "prog exec time": 250, "reproducing": 0, "rpc recv": 1407904532, "rpc sent": 40644008, "signal": 68192, "smash jobs": 0, "triage jobs": 0, "vm output": 913233, "vm restarts [base]": 8, "vm restarts [new]": 16 } 2025/09/11 01:49:38 base crash: WARNING in xfrm_state_fini 2025/09/11 01:49:38 runner 2 connected 2025/09/11 01:50:01 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/11 01:50:01 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 01:50:11 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:50:11 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/11 01:50:11 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 01:50:27 runner 1 connected 2025/09/11 01:50:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:50:40 base crash: WARNING in xfrm_state_fini 2025/09/11 01:50:45 base crash: WARNING in xfrm_state_fini 2025/09/11 01:50:50 runner 1 connected 2025/09/11 01:50:53 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:51:18 base crash: lost connection to test machine 2025/09/11 01:51:24 runner 3 connected 2025/09/11 01:51:26 runner 0 connected 2025/09/11 01:51:29 base crash "unregister_netdevice: waiting for DEV to become free" is already known 2025/09/11 01:51:29 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 01:51:29 runner 2 connected 2025/09/11 01:51:30 base crash "unregister_netdevice: waiting for DEV to become free" is already known 2025/09/11 01:51:30 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 01:51:34 runner 7 connected 2025/09/11 01:51:37 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 01:52:07 runner 1 connected 2025/09/11 01:52:18 runner 5 connected 2025/09/11 01:52:18 runner 6 connected 2025/09/11 01:52:25 runner 3 connected 2025/09/11 01:52:59 base crash: WARNING in reg_bounds_sanity_check 2025/09/11 01:53:01 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 01:53:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:53:47 runner 3 connected 2025/09/11 01:53:55 runner 3 connected 2025/09/11 01:54:04 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:54:26 STAT { "buffer too small": 0, "candidate triage jobs": 234, "candidates": 22729, "comps overflows": 0, "corpus": 6633, "corpus [files]": 1168, "corpus [symbols]": 1182, "cover overflows": 1343, "coverage": 79030, "distributor delayed": 13326, "distributor undelayed": 13118, "distributor violated": 829, "exec candidate": 6936, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 21, "exec seeds": 0, "exec smash": 0, "exec total [base]": 18808, "exec total [new]": 31509, "exec triage": 21226, "executor restarts [base]": 93, "executor restarts [new]": 148, "fault jobs": 0, "fuzzer jobs": 234, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 2, "hints jobs": 0, "max signal": 81430, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6936, "no exec duration": 32057000000, "no exec requests": 92, "pending": 0, "prog exec time": 147, "reproducing": 0, "rpc recv": 2538217100, "rpc sent": 81236040, "signal": 77472, "smash jobs": 0, "triage jobs": 0, "vm output": 1570494, "vm restarts [base]": 15, "vm restarts [new]": 22 } 2025/09/11 01:54:32 new: boot error: can't ssh into the instance 2025/09/11 01:54:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:54:41 base crash: WARNING in xfrm_state_fini 2025/09/11 01:54:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:54:53 runner 1 connected 2025/09/11 01:54:53 base crash: WARNING in xfrm_state_fini 2025/09/11 01:55:04 base crash: WARNING in xfrm_state_fini 2025/09/11 01:55:21 runner 8 connected 2025/09/11 01:55:21 runner 6 connected 2025/09/11 01:55:22 runner 0 connected 2025/09/11 01:55:34 runner 3 connected 2025/09/11 01:55:36 runner 7 connected 2025/09/11 01:55:45 base crash: WARNING in xfrm_state_fini 2025/09/11 01:55:49 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:55:53 runner 1 connected 2025/09/11 01:55:53 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:56:33 runner 2 connected 2025/09/11 01:56:38 runner 1 connected 2025/09/11 01:56:39 base crash: WARNING in xfrm_state_fini 2025/09/11 01:56:42 runner 8 connected 2025/09/11 01:56:45 new: boot error: can't ssh into the instance 2025/09/11 01:56:52 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 01:56:58 new: boot error: can't ssh into the instance 2025/09/11 01:57:28 runner 3 connected 2025/09/11 01:57:33 runner 9 connected 2025/09/11 01:57:41 runner 3 connected 2025/09/11 01:57:43 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 01:57:46 runner 4 connected 2025/09/11 01:58:17 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 01:58:27 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 01:58:30 base crash: WARNING in xfrm_state_fini 2025/09/11 01:58:32 base crash "KASAN: slab-use-after-free Read in __xfrm_state_insert" is already known 2025/09/11 01:58:32 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_insert [need repro = false] 2025/09/11 01:58:33 runner 2 connected 2025/09/11 01:58:48 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/11 01:58:48 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 01:59:06 runner 6 connected 2025/09/11 01:59:19 runner 0 connected 2025/09/11 01:59:26 STAT { "buffer too small": 0, "candidate triage jobs": 18, "candidates": 19865, "comps overflows": 0, "corpus": 9656, "corpus [files]": 1622, "corpus [symbols]": 1650, "cover overflows": 1976, "coverage": 85995, "distributor delayed": 19155, "distributor undelayed": 19153, "distributor violated": 1409, "exec candidate": 9800, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 28, "exec seeds": 0, "exec smash": 0, "exec total [base]": 30342, "exec total [new]": 47807, "exec triage": 30270, "executor restarts [base]": 122, "executor restarts [new]": 192, "fault jobs": 0, "fuzzer jobs": 18, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 4, "hints jobs": 0, "max signal": 87402, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 9800, "no exec duration": 34073000000, "no exec requests": 107, "pending": 0, "prog exec time": 176, "reproducing": 0, "rpc recv": 3725176128, "rpc sent": 127324496, "signal": 84232, "smash jobs": 0, "triage jobs": 0, "vm output": 2299375, "vm restarts [base]": 22, "vm restarts [new]": 32 } 2025/09/11 01:59:35 runner 8 connected 2025/09/11 01:59:59 base crash: general protection fault in __xfrm_state_insert 2025/09/11 02:00:02 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/11 02:00:02 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 02:00:16 new: boot error: can't ssh into the instance 2025/09/11 02:00:17 new: boot error: can't ssh into the instance 2025/09/11 02:00:22 patched crashed: SYZFAIL: repeatedly failed to execute the program [need repro = false] 2025/09/11 02:00:50 runner 2 connected 2025/09/11 02:00:50 runner 3 connected 2025/09/11 02:01:06 runner 0 connected 2025/09/11 02:01:07 runner 2 connected 2025/09/11 02:01:12 runner 6 connected 2025/09/11 02:01:22 base crash: WARNING in xfrm_state_fini 2025/09/11 02:01:58 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:01:58 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:02:08 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:02:08 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:02:12 runner 1 connected 2025/09/11 02:02:19 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:02:19 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:02:30 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:02:30 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:02:40 base crash "unregister_netdevice: waiting for DEV to become free" is already known 2025/09/11 02:02:40 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 02:02:47 runner 8 connected 2025/09/11 02:02:58 runner 0 connected 2025/09/11 02:03:02 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/11 02:03:06 new: boot error: can't ssh into the instance 2025/09/11 02:03:08 runner 2 connected 2025/09/11 02:03:18 runner 6 connected 2025/09/11 02:03:28 runner 9 connected 2025/09/11 02:03:50 base crash: WARNING in xfrm_state_fini 2025/09/11 02:03:53 runner 3 connected 2025/09/11 02:03:54 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 02:03:55 runner 5 connected 2025/09/11 02:04:01 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:04:05 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 02:04:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:04:17 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:04:26 STAT { "buffer too small": 0, "candidate triage jobs": 146, "candidates": 16922, "comps overflows": 0, "corpus": 12392, "corpus [files]": 2095, "corpus [symbols]": 2136, "cover overflows": 2776, "coverage": 90674, "distributor delayed": 24456, "distributor undelayed": 24318, "distributor violated": 1719, "exec candidate": 12743, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 49, "exec seeds": 0, "exec smash": 0, "exec total [base]": 46364, "exec total [new]": 68781, "exec triage": 39170, "executor restarts [base]": 155, "executor restarts [new]": 261, "fault jobs": 0, "fuzzer jobs": 146, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 1, "hints jobs": 0, "max signal": 92275, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12743, "no exec duration": 45318000000, "no exec requests": 169, "pending": 4, "prog exec time": 163, "reproducing": 0, "rpc recv": 4873671660, "rpc sent": 182710000, "signal": 88685, "smash jobs": 0, "triage jobs": 0, "vm output": 3267661, "vm restarts [base]": 25, "vm restarts [new]": 43 } 2025/09/11 02:04:35 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 02:04:35 base crash: WARNING in reg_bounds_sanity_check 2025/09/11 02:04:40 runner 0 connected 2025/09/11 02:04:42 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:04:49 runner 6 connected 2025/09/11 02:04:54 runner 3 connected 2025/09/11 02:05:04 runner 0 connected 2025/09/11 02:05:07 runner 2 connected 2025/09/11 02:05:17 runner 1 connected 2025/09/11 02:05:22 base crash: lost connection to test machine 2025/09/11 02:05:30 runner 5 connected 2025/09/11 02:05:31 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 02:06:03 base crash: WARNING in reg_bounds_sanity_check 2025/09/11 02:06:04 base crash: lost connection to test machine 2025/09/11 02:06:12 runner 3 connected 2025/09/11 02:06:21 runner 3 connected 2025/09/11 02:06:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:06:52 runner 2 connected 2025/09/11 02:06:53 runner 1 connected 2025/09/11 02:07:16 base crash: WARNING in xfrm_state_fini 2025/09/11 02:07:20 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:07:37 runner 9 connected 2025/09/11 02:08:04 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:08:07 runner 0 connected 2025/09/11 02:08:07 base crash: WARNING in xfrm_state_fini 2025/09/11 02:08:11 base crash: WARNING in xfrm_state_fini 2025/09/11 02:08:21 base crash: WARNING in xfrm_state_fini 2025/09/11 02:08:33 new: boot error: can't ssh into the instance 2025/09/11 02:08:38 new: boot error: can't ssh into the instance 2025/09/11 02:08:44 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:08:44 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:08:53 runner 3 connected 2025/09/11 02:08:55 runner 2 connected 2025/09/11 02:09:00 runner 1 connected 2025/09/11 02:09:10 runner 3 connected 2025/09/11 02:09:21 runner 7 connected 2025/09/11 02:09:26 runner 1 connected 2025/09/11 02:09:26 STAT { "buffer too small": 0, "candidate triage jobs": 1, "candidates": 16602, "comps overflows": 0, "corpus": 12783, "corpus [files]": 2129, "corpus [symbols]": 2171, "cover overflows": 3644, "coverage": 91555, "distributor delayed": 25130, "distributor undelayed": 25130, "distributor violated": 1834, "exec candidate": 13063, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 59, "exec seeds": 0, "exec smash": 0, "exec total [base]": 56060, "exec total [new]": 86073, "exec triage": 40528, "executor restarts [base]": 190, "executor restarts [new]": 311, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 4, "hints jobs": 0, "max signal": 93114, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13063, "no exec duration": 46767000000, "no exec requests": 179, "pending": 5, "prog exec time": 140, "reproducing": 0, "rpc recv": 5698074884, "rpc sent": 224474456, "signal": 89523, "smash jobs": 0, "triage jobs": 0, "vm output": 4071717, "vm restarts [base]": 34, "vm restarts [new]": 53 } 2025/09/11 02:09:29 base crash: WARNING in reg_bounds_sanity_check 2025/09/11 02:09:34 runner 2 connected 2025/09/11 02:09:44 base crash: lost connection to test machine 2025/09/11 02:09:44 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 02:09:54 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:10:17 runner 0 connected 2025/09/11 02:10:18 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 02:10:32 runner 9 connected 2025/09/11 02:10:33 runner 1 connected 2025/09/11 02:10:43 runner 3 connected 2025/09/11 02:11:07 runner 5 connected 2025/09/11 02:11:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:11:36 base crash: WARNING in xfrm_state_fini 2025/09/11 02:12:04 patched crashed: INFO: rcu detected stall in smp_call_function [need repro = false] 2025/09/11 02:12:14 runner 2 connected 2025/09/11 02:12:16 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:12:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:12:26 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:12:27 runner 3 connected 2025/09/11 02:12:53 runner 7 connected 2025/09/11 02:13:05 runner 3 connected 2025/09/11 02:13:10 runner 1 connected 2025/09/11 02:13:11 base crash: WARNING in xfrm_state_fini 2025/09/11 02:13:13 runner 0 connected 2025/09/11 02:13:34 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:13:34 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:13:37 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 02:13:44 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:13:44 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:13:53 base crash: WARNING in reg_bounds_sanity_check 2025/09/11 02:13:55 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:13:55 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:14:00 new: boot error: can't ssh into the instance 2025/09/11 02:14:00 runner 2 connected 2025/09/11 02:14:06 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:14:06 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:14:17 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:14:17 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:14:22 runner 9 connected 2025/09/11 02:14:26 STAT { "buffer too small": 0, "candidate triage jobs": 8, "candidates": 16441, "comps overflows": 0, "corpus": 12834, "corpus [files]": 2131, "corpus [symbols]": 2173, "cover overflows": 4497, "coverage": 91639, "distributor delayed": 25392, "distributor undelayed": 25384, "distributor violated": 1860, "exec candidate": 13224, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 67, "exec seeds": 0, "exec smash": 0, "exec total [base]": 68357, "exec total [new]": 103370, "exec triage": 41003, "executor restarts [base]": 220, "executor restarts [new]": 365, "fault jobs": 0, "fuzzer jobs": 8, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 0, "hints jobs": 0, "max signal": 93406, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13181, "no exec duration": 47615000000, "no exec requests": 185, "pending": 10, "prog exec time": 0, "reproducing": 0, "rpc recv": 6488499952, "rpc sent": 272119192, "signal": 89605, "smash jobs": 0, "triage jobs": 0, "vm output": 4853818, "vm restarts [base]": 38, "vm restarts [new]": 63 } 2025/09/11 02:14:27 runner 3 connected 2025/09/11 02:14:30 patched crashed: KASAN: slab-out-of-bounds Write in compute_postorder [need repro = true] 2025/09/11 02:14:30 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:14:32 runner 7 connected 2025/09/11 02:14:40 new: boot error: can't ssh into the instance 2025/09/11 02:14:42 runner 0 connected 2025/09/11 02:14:43 runner 2 connected 2025/09/11 02:14:48 runner 8 connected 2025/09/11 02:14:55 runner 5 connected 2025/09/11 02:15:06 runner 1 connected 2025/09/11 02:15:13 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/11 02:15:20 runner 0 connected 2025/09/11 02:15:30 runner 4 connected 2025/09/11 02:15:36 base crash: WARNING in reg_bounds_sanity_check 2025/09/11 02:15:44 base crash: WARNING in xfrm_state_fini 2025/09/11 02:16:01 base crash: WARNING in xfrm_state_fini 2025/09/11 02:16:02 runner 7 connected 2025/09/11 02:16:32 runner 1 connected 2025/09/11 02:16:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:16:42 runner 0 connected 2025/09/11 02:16:58 runner 2 connected 2025/09/11 02:17:26 new: boot error: can't ssh into the instance 2025/09/11 02:17:27 triaged 92.9% of the corpus 2025/09/11 02:17:27 starting bug reproductions 2025/09/11 02:17:27 starting bug reproductions (max 10 VMs, 7 repros) 2025/09/11 02:17:27 start reproducing 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 02:17:56 patched crashed: SYZFAIL: repeatedly failed to execute the program [need repro = false] 2025/09/11 02:17:57 triaged 100.0% of the corpus 2025/09/11 02:18:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:18:15 runner 6 connected 2025/09/11 02:18:53 runner 3 connected 2025/09/11 02:19:03 base crash: WARNING in xfrm_state_fini 2025/09/11 02:19:05 runner 9 connected 2025/09/11 02:19:10 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/11 02:19:10 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 02:19:13 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 02:19:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 0, "corpus": 12878, "corpus [files]": 2132, "corpus [symbols]": 2174, "cover overflows": 5540, "coverage": 91734, "distributor delayed": 25636, "distributor undelayed": 25636, "distributor violated": 1860, "exec candidate": 29665, "exec collide": 1428, "exec fuzz": 2746, "exec gen": 141, "exec hints": 156, "exec inject": 0, "exec minimize": 128, "exec retries": 86, "exec seeds": 18, "exec smash": 128, "exec total [base]": 79862, "exec total [new]": 126112, "exec triage": 41556, "executor restarts [base]": 249, "executor restarts [new]": 441, "fault jobs": 0, "fuzzer jobs": 10, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 3, "max signal": 93738, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 59, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13316, "no exec duration": 49683000000, "no exec requests": 199, "pending": 10, "prog exec time": 272, "reproducing": 1, "rpc recv": 7351504732, "rpc sent": 351903488, "signal": 89693, "smash jobs": 2, "triage jobs": 5, "vm output": 6081910, "vm restarts [base]": 42, "vm restarts [new]": 75 } 2025/09/11 02:19:34 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:19:52 runner 3 connected 2025/09/11 02:20:03 runner 1 connected 2025/09/11 02:20:08 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:20:31 base crash: WARNING in xfrm_state_fini 2025/09/11 02:20:57 runner 7 connected 2025/09/11 02:21:01 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:21:05 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:21:12 runner 2 connected 2025/09/11 02:21:18 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:21:53 runner 6 connected 2025/09/11 02:22:06 runner 8 connected 2025/09/11 02:22:09 base crash: WARNING in xfrm_state_fini 2025/09/11 02:22:17 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:22:18 base crash: lost connection to test machine 2025/09/11 02:22:22 base crash: INFO: task hung in addrconf_verify_work 2025/09/11 02:22:57 runner 2 connected 2025/09/11 02:23:03 base crash "KASAN: slab-use-after-free Read in xfrm_state_find" is already known 2025/09/11 02:23:03 patched crashed: KASAN: slab-use-after-free Read in xfrm_state_find [need repro = false] 2025/09/11 02:23:05 runner 3 connected 2025/09/11 02:23:07 runner 1 connected 2025/09/11 02:23:10 base crash: INFO: task hung in __free_event 2025/09/11 02:23:12 runner 0 connected 2025/09/11 02:23:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:23:52 runner 7 connected 2025/09/11 02:23:59 runner 3 connected 2025/09/11 02:24:14 runner 9 connected 2025/09/11 02:24:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 3, "corpus": 12895, "corpus [files]": 2135, "corpus [symbols]": 2177, "cover overflows": 6021, "coverage": 91762, "distributor delayed": 25779, "distributor undelayed": 25779, "distributor violated": 1875, "exec candidate": 29665, "exec collide": 4296, "exec fuzz": 7989, "exec gen": 431, "exec hints": 3067, "exec inject": 0, "exec minimize": 664, "exec retries": 91, "exec seeds": 78, "exec smash": 643, "exec total [base]": 84764, "exec total [new]": 138771, "exec triage": 41795, "executor restarts [base]": 272, "executor restarts [new]": 470, "fault jobs": 0, "fuzzer jobs": 8, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 7, "max signal": 94994, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 325, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13391, "no exec duration": 49714000000, "no exec requests": 200, "pending": 10, "prog exec time": 265, "reproducing": 1, "rpc recv": 7967739824, "rpc sent": 430465064, "signal": 89716, "smash jobs": 1, "triage jobs": 0, "vm output": 6921234, "vm restarts [base]": 49, "vm restarts [new]": 81 } 2025/09/11 02:24:42 base crash: lost connection to test machine 2025/09/11 02:25:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:25:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:25:33 runner 2 connected 2025/09/11 02:26:01 base crash: WARNING in xfrm_state_fini 2025/09/11 02:26:21 runner 8 connected 2025/09/11 02:26:22 runner 6 connected 2025/09/11 02:26:27 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/11 02:26:28 patched crashed: INFO: rcu detected stall in ppp_ioctl [need repro = false] 2025/09/11 02:26:51 runner 1 connected 2025/09/11 02:26:55 base crash: lost connection to test machine 2025/09/11 02:27:15 runner 7 connected 2025/09/11 02:27:17 runner 9 connected 2025/09/11 02:27:43 runner 0 connected 2025/09/11 02:28:36 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:28:49 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/11 02:28:50 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:29:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:29:16 new: boot error: can't ssh into the instance 2025/09/11 02:29:24 runner 7 connected 2025/09/11 02:29:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 10, "corpus": 12909, "corpus [files]": 2135, "corpus [symbols]": 2177, "cover overflows": 6604, "coverage": 91778, "distributor delayed": 25887, "distributor undelayed": 25886, "distributor violated": 1882, "exec candidate": 29665, "exec collide": 6567, "exec fuzz": 12168, "exec gen": 660, "exec hints": 5537, "exec inject": 0, "exec minimize": 1015, "exec retries": 95, "exec seeds": 126, "exec smash": 1015, "exec total [base]": 94770, "exec total [new]": 148846, "exec triage": 41953, "executor restarts [base]": 293, "executor restarts [new]": 495, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 2, "hints jobs": 4, "max signal": 95086, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 498, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13445, "no exec duration": 49917000000, "no exec requests": 202, "pending": 10, "prog exec time": 281, "reproducing": 1, "rpc recv": 8556024408, "rpc sent": 517331304, "signal": 89731, "smash jobs": 0, "triage jobs": 1, "vm output": 7643001, "vm restarts [base]": 52, "vm restarts [new]": 86 } 2025/09/11 02:29:38 runner 3 connected 2025/09/11 02:29:40 new: boot error: can't ssh into the instance 2025/09/11 02:29:40 runner 2 connected 2025/09/11 02:29:57 runner 6 connected 2025/09/11 02:30:14 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 02:30:18 new: boot error: can't ssh into the instance 2025/09/11 02:30:26 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:30:29 runner 4 connected 2025/09/11 02:30:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:31:01 runner 0 connected 2025/09/11 02:31:07 base crash: WARNING in xfrm_state_fini 2025/09/11 02:31:07 new: boot error: can't ssh into the instance 2025/09/11 02:31:16 runner 9 connected 2025/09/11 02:31:26 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/11 02:31:31 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:31:40 runner 7 connected 2025/09/11 02:31:57 runner 2 connected 2025/09/11 02:32:05 runner 3 connected 2025/09/11 02:32:14 runner 1 connected 2025/09/11 02:32:20 runner 3 connected 2025/09/11 02:33:11 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:33:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:33:56 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:34:11 runner 6 connected 2025/09/11 02:34:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:34:15 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/11 02:34:25 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:34:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 11, "corpus": 12924, "corpus [files]": 2137, "corpus [symbols]": 2179, "cover overflows": 7234, "coverage": 91831, "distributor delayed": 25991, "distributor undelayed": 25990, "distributor violated": 1883, "exec candidate": 29665, "exec collide": 10217, "exec fuzz": 19117, "exec gen": 1019, "exec hints": 7905, "exec inject": 0, "exec minimize": 1350, "exec retries": 106, "exec seeds": 174, "exec smash": 1399, "exec total [base]": 104462, "exec total [new]": 163156, "exec triage": 42162, "executor restarts [base]": 316, "executor restarts [new]": 538, "fault jobs": 0, "fuzzer jobs": 8, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 3, "hints jobs": 6, "max signal": 95218, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 659, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13514, "no exec duration": 49917000000, "no exec requests": 202, "pending": 10, "prog exec time": 223, "reproducing": 1, "rpc recv": 9329712776, "rpc sent": 641016000, "signal": 89781, "smash jobs": 0, "triage jobs": 2, "vm output": 8820466, "vm restarts [base]": 56, "vm restarts [new]": 94 } 2025/09/11 02:34:40 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/11 02:35:00 runner 8 connected 2025/09/11 02:35:04 runner 2 connected 2025/09/11 02:35:17 base crash: WARNING in xfrm_state_fini 2025/09/11 02:35:30 runner 0 connected 2025/09/11 02:35:42 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/11 02:35:42 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 02:35:54 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 02:35:59 runner 1 connected 2025/09/11 02:36:20 base crash: lost connection to test machine 2025/09/11 02:36:30 runner 7 connected 2025/09/11 02:36:32 base crash: lost connection to test machine 2025/09/11 02:36:35 runner 3 connected 2025/09/11 02:37:08 runner 0 connected 2025/09/11 02:37:20 runner 1 connected 2025/09/11 02:37:27 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 02:38:00 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:38:18 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:38:45 base crash: lost connection to test machine 2025/09/11 02:38:49 runner 7 connected 2025/09/11 02:39:06 runner 8 connected 2025/09/11 02:39:21 new: boot error: can't ssh into the instance 2025/09/11 02:39:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 17, "corpus": 12928, "corpus [files]": 2137, "corpus [symbols]": 2179, "cover overflows": 7986, "coverage": 91839, "distributor delayed": 26073, "distributor undelayed": 26073, "distributor violated": 1891, "exec candidate": 29665, "exec collide": 12674, "exec fuzz": 23881, "exec gen": 1297, "exec hints": 10581, "exec inject": 0, "exec minimize": 1517, "exec retries": 113, "exec seeds": 190, "exec smash": 1509, "exec total [base]": 111762, "exec total [new]": 173760, "exec triage": 42292, "executor restarts [base]": 338, "executor restarts [new]": 559, "fault jobs": 0, "fuzzer jobs": 7, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 3, "hints jobs": 4, "max signal": 95302, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 736, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13557, "no exec duration": 50790000000, "no exec requests": 213, "pending": 10, "prog exec time": 232, "reproducing": 1, "rpc recv": 9926214444, "rpc sent": 723614920, "signal": 89788, "smash jobs": 2, "triage jobs": 1, "vm output": 9698173, "vm restarts [base]": 62, "vm restarts [new]": 98 } 2025/09/11 02:39:30 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:39:34 runner 1 connected 2025/09/11 02:40:03 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/11 02:40:10 runner 5 connected 2025/09/11 02:40:18 runner 3 connected 2025/09/11 02:40:52 runner 6 connected 2025/09/11 02:41:00 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/11 02:41:20 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 02:41:49 runner 3 connected 2025/09/11 02:42:09 runner 0 connected 2025/09/11 02:43:01 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:43:16 new: boot error: can't ssh into the instance 2025/09/11 02:43:20 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 02:43:50 runner 6 connected 2025/09/11 02:44:02 new: boot error: can't ssh into the instance 2025/09/11 02:44:05 runner 4 connected 2025/09/11 02:44:08 runner 0 connected 2025/09/11 02:44:11 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 02:44:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 21, "corpus": 12928, "corpus [files]": 2137, "corpus [symbols]": 2179, "cover overflows": 8684, "coverage": 91840, "distributor delayed": 26177, "distributor undelayed": 26177, "distributor violated": 1895, "exec candidate": 29665, "exec collide": 16551, "exec fuzz": 31266, "exec gen": 1692, "exec hints": 11629, "exec inject": 0, "exec minimize": 1521, "exec retries": 123, "exec seeds": 195, "exec smash": 1574, "exec total [base]": 119257, "exec total [new]": 186730, "exec triage": 42477, "executor restarts [base]": 352, "executor restarts [new]": 594, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 2, "max signal": 95508, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 738, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13617, "no exec duration": 50815000000, "no exec requests": 216, "pending": 10, "prog exec time": 304, "reproducing": 1, "rpc recv": 10505348532, "rpc sent": 830843600, "signal": 89789, "smash jobs": 0, "triage jobs": 2, "vm output": 11000923, "vm restarts [base]": 66, "vm restarts [new]": 103 } 2025/09/11 02:44:31 new: boot error: can't ssh into the instance 2025/09/11 02:44:51 runner 9 connected 2025/09/11 02:45:01 runner 7 connected 2025/09/11 02:45:04 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 02:45:20 runner 2 connected 2025/09/11 02:45:41 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/11 02:45:52 runner 8 connected 2025/09/11 02:45:54 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:46:29 runner 1 connected 2025/09/11 02:46:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:46:40 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:46:41 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:46:57 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:47:20 runner 6 connected 2025/09/11 02:47:25 base crash: WARNING in xfrm_state_fini 2025/09/11 02:47:28 runner 3 connected 2025/09/11 02:47:30 runner 4 connected 2025/09/11 02:47:32 base: boot error: can't ssh into the instance 2025/09/11 02:47:46 runner 9 connected 2025/09/11 02:47:57 fuzzer has reached the modified code (2179 + 2137 + 0), continuing fuzzing 2025/09/11 02:48:00 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:48:14 runner 3 connected 2025/09/11 02:48:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:48:22 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 02:48:49 runner 2 connected 2025/09/11 02:49:04 runner 7 connected 2025/09/11 02:49:11 runner 8 connected 2025/09/11 02:49:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 27, "corpus": 12935, "corpus [files]": 2137, "corpus [symbols]": 2179, "cover overflows": 9427, "coverage": 91852, "distributor delayed": 26254, "distributor undelayed": 26254, "distributor violated": 1897, "exec candidate": 29665, "exec collide": 20884, "exec fuzz": 39706, "exec gen": 2134, "exec hints": 12898, "exec inject": 0, "exec minimize": 1697, "exec retries": 130, "exec seeds": 216, "exec smash": 1733, "exec total [base]": 125955, "exec total [new]": 201743, "exec triage": 42640, "executor restarts [base]": 367, "executor restarts [new]": 643, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 2, "max signal": 95610, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 827, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13671, "no exec duration": 50908000000, "no exec requests": 220, "pending": 10, "prog exec time": 316, "reproducing": 1, "rpc recv": 11185275404, "rpc sent": 948344664, "signal": 89799, "smash jobs": 0, "triage jobs": 2, "vm output": 12420007, "vm restarts [base]": 68, "vm restarts [new]": 114 } 2025/09/11 02:49:29 base crash: WARNING in xfrm_state_fini 2025/09/11 02:49:49 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:50:17 runner 3 connected 2025/09/11 02:50:28 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:50:38 runner 9 connected 2025/09/11 02:51:16 runner 6 connected 2025/09/11 02:51:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:51:39 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:52:03 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:52:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:52:25 runner 4 connected 2025/09/11 02:52:27 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 02:52:27 runner 8 connected 2025/09/11 02:52:51 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/11 02:52:51 runner 7 connected 2025/09/11 02:52:55 runner 3 connected 2025/09/11 02:52:56 base crash: WARNING in xfrm_state_fini 2025/09/11 02:53:00 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:53:03 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 02:53:16 runner 0 connected 2025/09/11 02:53:23 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 02:53:38 runner 2 connected 2025/09/11 02:53:45 runner 1 connected 2025/09/11 02:53:49 runner 6 connected 2025/09/11 02:53:50 runner 9 connected 2025/09/11 02:54:12 runner 3 connected 2025/09/11 02:54:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 29, "corpus": 12940, "corpus [files]": 2138, "corpus [symbols]": 2180, "cover overflows": 10107, "coverage": 91885, "distributor delayed": 26319, "distributor undelayed": 26319, "distributor violated": 1898, "exec candidate": 29665, "exec collide": 25073, "exec fuzz": 47955, "exec gen": 2595, "exec hints": 14215, "exec inject": 0, "exec minimize": 1764, "exec retries": 138, "exec seeds": 234, "exec smash": 1863, "exec total [base]": 132145, "exec total [new]": 216317, "exec triage": 42778, "executor restarts [base]": 385, "executor restarts [new]": 690, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 3, "max signal": 95702, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 886, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13715, "no exec duration": 51024000000, "no exec requests": 223, "pending": 10, "prog exec time": 310, "reproducing": 1, "rpc recv": 11839640804, "rpc sent": 1060859120, "signal": 89832, "smash jobs": 1, "triage jobs": 0, "vm output": 13726849, "vm restarts [base]": 72, "vm restarts [new]": 123 } 2025/09/11 02:54:58 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 02:55:24 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 02:55:42 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:55:43 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:55:47 runner 1 connected 2025/09/11 02:56:00 new: boot error: can't ssh into the instance 2025/09/11 02:56:14 runner 4 connected 2025/09/11 02:56:32 runner 7 connected 2025/09/11 02:56:32 runner 3 connected 2025/09/11 02:56:50 runner 5 connected 2025/09/11 02:56:51 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:56:54 base crash: WARNING in xfrm_state_fini 2025/09/11 02:56:55 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:56:59 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:57:17 base crash: WARNING in xfrm_state_fini 2025/09/11 02:57:38 base: boot error: can't ssh into the instance 2025/09/11 02:57:39 runner 8 connected 2025/09/11 02:57:43 runner 3 connected 2025/09/11 02:57:44 runner 2 connected 2025/09/11 02:57:48 runner 6 connected 2025/09/11 02:58:05 runner 0 connected 2025/09/11 02:58:06 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:58:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:58:28 runner 2 connected 2025/09/11 02:58:59 runner 7 connected 2025/09/11 02:59:06 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:59:07 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 02:59:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 29, "corpus": 12944, "corpus [files]": 2138, "corpus [symbols]": 2180, "cover overflows": 10922, "coverage": 91894, "distributor delayed": 26390, "distributor undelayed": 26390, "distributor violated": 1898, "exec candidate": 29665, "exec collide": 30190, "exec fuzz": 57533, "exec gen": 3123, "exec hints": 15075, "exec inject": 0, "exec minimize": 1889, "exec retries": 142, "exec seeds": 246, "exec smash": 1951, "exec total [base]": 139674, "exec total [new]": 232733, "exec triage": 42892, "executor restarts [base]": 403, "executor restarts [new]": 725, "fault jobs": 0, "fuzzer jobs": 8, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 4, "hints jobs": 3, "max signal": 95775, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 938, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13753, "no exec duration": 52412000000, "no exec requests": 226, "pending": 10, "prog exec time": 282, "reproducing": 1, "rpc recv": 12501097156, "rpc sent": 1190817024, "signal": 89840, "smash jobs": 2, "triage jobs": 3, "vm output": 15051311, "vm restarts [base]": 76, "vm restarts [new]": 131 } 2025/09/11 02:59:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 02:59:57 runner 3 connected 2025/09/11 02:59:57 runner 5 connected 2025/09/11 03:00:26 runner 4 connected 2025/09/11 03:00:28 base crash: WARNING in xfrm_state_fini 2025/09/11 03:00:59 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:01:03 base crash: WARNING in xfrm_state_fini 2025/09/11 03:01:21 base crash: KASAN: slab-use-after-free Write in __xfrm_state_delete 2025/09/11 03:01:25 runner 1 connected 2025/09/11 03:01:48 runner 8 connected 2025/09/11 03:01:49 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:01:52 runner 0 connected 2025/09/11 03:02:09 runner 3 connected 2025/09/11 03:02:11 base crash: lost connection to test machine 2025/09/11 03:02:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:02:37 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:02:39 runner 2 connected 2025/09/11 03:02:47 base crash: WARNING in xfrm_state_fini 2025/09/11 03:02:52 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:02:59 runner 1 connected 2025/09/11 03:03:14 runner 7 connected 2025/09/11 03:03:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:03:25 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 03:03:26 runner 6 connected 2025/09/11 03:03:34 base crash: WARNING in xfrm_state_fini 2025/09/11 03:03:40 runner 3 connected 2025/09/11 03:04:11 runner 5 connected 2025/09/11 03:04:16 runner 4 connected 2025/09/11 03:04:22 runner 3 connected 2025/09/11 03:04:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 32, "corpus": 12951, "corpus [files]": 2138, "corpus [symbols]": 2180, "cover overflows": 11635, "coverage": 91902, "distributor delayed": 26460, "distributor undelayed": 26460, "distributor violated": 1899, "exec candidate": 29665, "exec collide": 34387, "exec fuzz": 65193, "exec gen": 3526, "exec hints": 15782, "exec inject": 0, "exec minimize": 2220, "exec retries": 150, "exec seeds": 267, "exec smash": 2174, "exec total [base]": 145517, "exec total [new]": 246408, "exec triage": 43010, "executor restarts [base]": 423, "executor restarts [new]": 771, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 3, "max signal": 95857, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1095, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13791, "no exec duration": 52459000000, "no exec requests": 227, "pending": 10, "prog exec time": 282, "reproducing": 1, "rpc recv": 13176286948, "rpc sent": 1300054584, "signal": 89848, "smash jobs": 1, "triage jobs": 2, "vm output": 16409439, "vm restarts [base]": 81, "vm restarts [new]": 141 } 2025/09/11 03:05:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:05:30 base crash: INFO: task hung in linkwatch_event 2025/09/11 03:05:38 base crash: lost connection to test machine 2025/09/11 03:05:44 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:06:03 runner 7 connected 2025/09/11 03:06:20 runner 0 connected 2025/09/11 03:06:26 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 03:06:27 runner 1 connected 2025/09/11 03:06:32 runner 8 connected 2025/09/11 03:06:49 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:07:02 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:07:15 runner 2 connected 2025/09/11 03:07:32 base crash: lost connection to test machine 2025/09/11 03:07:39 runner 6 connected 2025/09/11 03:07:47 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:07:50 runner 7 connected 2025/09/11 03:07:53 base crash: WARNING in xfrm_state_fini 2025/09/11 03:08:12 new: boot error: can't ssh into the instance 2025/09/11 03:08:17 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:08:34 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:08:36 runner 8 connected 2025/09/11 03:08:42 runner 3 connected 2025/09/11 03:08:42 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 03:08:45 base crash: lost connection to test machine 2025/09/11 03:08:53 runner 9 connected 2025/09/11 03:09:06 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 03:09:22 runner 7 connected 2025/09/11 03:09:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 12953, "corpus [files]": 2138, "corpus [symbols]": 2180, "cover overflows": 12483, "coverage": 91906, "distributor delayed": 26507, "distributor undelayed": 26507, "distributor violated": 1899, "exec candidate": 29665, "exec collide": 38664, "exec fuzz": 73261, "exec gen": 3956, "exec hints": 16546, "exec inject": 0, "exec minimize": 2279, "exec retries": 164, "exec seeds": 273, "exec smash": 2238, "exec total [base]": 149536, "exec total [new]": 260163, "exec triage": 43101, "executor restarts [base]": 445, "executor restarts [new]": 819, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 4, "hints jobs": 1, "max signal": 95899, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1130, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13822, "no exec duration": 52463000000, "no exec requests": 228, "pending": 10, "prog exec time": 323, "reproducing": 1, "rpc recv": 13688291724, "rpc sent": 1399956592, "signal": 89851, "smash jobs": 0, "triage jobs": 3, "vm output": 17639576, "vm restarts [base]": 84, "vm restarts [new]": 149 } 2025/09/11 03:09:30 runner 3 connected 2025/09/11 03:09:34 runner 0 connected 2025/09/11 03:09:56 runner 6 connected 2025/09/11 03:10:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:10:14 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 03:10:53 runner 8 connected 2025/09/11 03:11:02 runner 2 connected 2025/09/11 03:11:09 base crash: INFO: rcu detected stall in __sock_create 2025/09/11 03:11:57 runner 3 connected 2025/09/11 03:12:14 base crash: WARNING in xfrm_state_fini 2025/09/11 03:12:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:12:49 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/11 03:12:53 base: boot error: can't ssh into the instance 2025/09/11 03:13:03 runner 0 connected 2025/09/11 03:13:04 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:13:22 runner 6 connected 2025/09/11 03:13:37 runner 9 connected 2025/09/11 03:13:42 runner 2 connected 2025/09/11 03:13:44 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 03:13:50 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:13:53 runner 3 connected 2025/09/11 03:14:09 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:14:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 44, "corpus": 12956, "corpus [files]": 2138, "corpus [symbols]": 2180, "cover overflows": 13599, "coverage": 91909, "distributor delayed": 26575, "distributor undelayed": 26575, "distributor violated": 1899, "exec candidate": 29665, "exec collide": 43487, "exec fuzz": 82384, "exec gen": 4449, "exec hints": 16854, "exec inject": 0, "exec minimize": 2340, "exec retries": 166, "exec seeds": 285, "exec smash": 2338, "exec total [base]": 152742, "exec total [new]": 275226, "exec triage": 43242, "executor restarts [base]": 458, "executor restarts [new]": 860, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 0, "max signal": 95985, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1160, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13866, "no exec duration": 52498000000, "no exec requests": 229, "pending": 10, "prog exec time": 344, "reproducing": 1, "rpc recv": 14206476364, "rpc sent": 1505441136, "signal": 89854, "smash jobs": 0, "triage jobs": 0, "vm output": 19121871, "vm restarts [base]": 88, "vm restarts [new]": 156 } 2025/09/11 03:14:32 runner 3 connected 2025/09/11 03:14:35 base crash: WARNING in xfrm_state_fini 2025/09/11 03:14:39 runner 5 connected 2025/09/11 03:14:58 runner 2 connected 2025/09/11 03:15:13 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:15:19 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:15:25 runner 2 connected 2025/09/11 03:15:45 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:15:48 base crash: lost connection to test machine 2025/09/11 03:15:52 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:16:02 runner 9 connected 2025/09/11 03:16:14 patched crashed: INFO: rcu detected stall in sys_clone [need repro = false] 2025/09/11 03:16:21 base crash: WARNING in xfrm_state_fini 2025/09/11 03:16:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:16:34 runner 3 connected 2025/09/11 03:16:36 runner 3 connected 2025/09/11 03:16:40 runner 6 connected 2025/09/11 03:17:03 runner 8 connected 2025/09/11 03:17:10 runner 0 connected 2025/09/11 03:17:18 base crash: lost connection to test machine 2025/09/11 03:17:20 runner 2 connected 2025/09/11 03:17:38 base: boot error: can't ssh into the instance 2025/09/11 03:18:00 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:18:08 runner 2 connected 2025/09/11 03:18:20 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:18:23 new: boot error: can't ssh into the instance 2025/09/11 03:18:27 runner 1 connected 2025/09/11 03:18:51 runner 5 connected 2025/09/11 03:18:52 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:19:02 repro finished 'KASAN: slab-out-of-bounds Write in compute_postorder', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/09/11 03:19:02 failed repro for "KASAN: slab-out-of-bounds Write in compute_postorder", err=%!s() 2025/09/11 03:19:02 "KASAN: slab-out-of-bounds Write in compute_postorder": saved crash log into 1757560742.crash.log 2025/09/11 03:19:02 "KASAN: slab-out-of-bounds Write in compute_postorder": saved repro log into 1757560742.repro.log 2025/09/11 03:19:02 start reproducing 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 03:19:08 runner 3 connected 2025/09/11 03:19:11 runner 4 connected 2025/09/11 03:19:16 base crash: WARNING in xfrm_state_fini 2025/09/11 03:19:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 12958, "corpus [files]": 2138, "corpus [symbols]": 2180, "cover overflows": 14188, "coverage": 91912, "distributor delayed": 26637, "distributor undelayed": 26637, "distributor violated": 1899, "exec candidate": 29665, "exec collide": 47084, "exec fuzz": 89304, "exec gen": 4802, "exec hints": 16855, "exec inject": 0, "exec minimize": 2412, "exec retries": 173, "exec seeds": 291, "exec smash": 2388, "exec total [base]": 158256, "exec total [new]": 286340, "exec triage": 43347, "executor restarts [base]": 488, "executor restarts [new]": 905, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 96053, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1211, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13902, "no exec duration": 52518000000, "no exec requests": 231, "pending": 9, "prog exec time": 358, "reproducing": 1, "rpc recv": 14935888872, "rpc sent": 1608271944, "signal": 89857, "smash jobs": 0, "triage jobs": 2, "vm output": 20155297, "vm restarts [base]": 94, "vm restarts [new]": 166 } 2025/09/11 03:19:29 reproducing crash 'KASAN: slab-out-of-bounds Write in compute_postorder': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 03:19:42 runner 8 connected 2025/09/11 03:20:19 reproducing crash 'KASAN: slab-out-of-bounds Write in compute_postorder': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 03:20:27 base crash: WARNING in xfrm_state_fini 2025/09/11 03:20:48 reproducing crash 'KASAN: slab-out-of-bounds Write in compute_postorder': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 03:21:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:21:17 runner 2 connected 2025/09/11 03:21:19 base crash: WARNING in xfrm_state_fini 2025/09/11 03:21:27 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:21:59 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:22:01 runner 6 connected 2025/09/11 03:22:02 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 03:22:03 reproducing crash 'KASAN: slab-out-of-bounds Write in compute_postorder': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 03:22:03 repro finished 'KASAN: slab-out-of-bounds Write in compute_postorder', repro=true crepro=false desc='KASAN: slab-out-of-bounds Write in compute_postorder' hub=false from_dashboard=false 2025/09/11 03:22:03 found repro for "KASAN: slab-out-of-bounds Write in compute_postorder" (orig title: "-SAME-", reliability: 1), took 3.02 minutes 2025/09/11 03:22:03 "KASAN: slab-out-of-bounds Write in compute_postorder": saved crash log into 1757560923.crash.log 2025/09/11 03:22:03 "KASAN: slab-out-of-bounds Write in compute_postorder": saved repro log into 1757560923.repro.log 2025/09/11 03:22:03 start reproducing 'KASAN: slab-out-of-bounds Write in compute_postorder' 2025/09/11 03:22:08 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:22:15 runner 8 connected 2025/09/11 03:22:47 runner 5 connected 2025/09/11 03:22:51 runner 2 connected 2025/09/11 03:22:58 runner 4 connected 2025/09/11 03:23:04 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:23:31 base crash: lost connection to test machine 2025/09/11 03:23:53 runner 9 connected 2025/09/11 03:24:12 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 03:24:20 runner 2 connected 2025/09/11 03:24:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 53, "corpus": 12966, "corpus [files]": 2138, "corpus [symbols]": 2181, "cover overflows": 15133, "coverage": 91922, "distributor delayed": 26698, "distributor undelayed": 26698, "distributor violated": 1899, "exec candidate": 29665, "exec collide": 51958, "exec fuzz": 98582, "exec gen": 5278, "exec hints": 17106, "exec inject": 0, "exec minimize": 2731, "exec retries": 183, "exec seeds": 315, "exec smash": 2578, "exec total [base]": 163800, "exec total [new]": 301873, "exec triage": 43464, "executor restarts [base]": 494, "executor restarts [new]": 946, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 96120, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1374, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13941, "no exec duration": 52803000000, "no exec requests": 238, "pending": 8, "prog exec time": 280, "reproducing": 1, "rpc recv": 15420132060, "rpc sent": 1725175584, "signal": 89866, "smash jobs": 1, "triage jobs": 2, "vm output": 21230187, "vm restarts [base]": 96, "vm restarts [new]": 173 } 2025/09/11 03:25:01 runner 3 connected 2025/09/11 03:25:03 base crash: WARNING in xfrm_state_fini 2025/09/11 03:25:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:25:25 new: boot error: can't ssh into the instance 2025/09/11 03:25:28 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:25:31 patched crashed: INFO: task hung in nfsd_nl_listener_set_doit [need repro = true] 2025/09/11 03:25:31 scheduled a reproduction of 'INFO: task hung in nfsd_nl_listener_set_doit' 2025/09/11 03:25:31 start reproducing 'INFO: task hung in nfsd_nl_listener_set_doit' 2025/09/11 03:25:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:25:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:26:13 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 03:26:14 runner 7 connected 2025/09/11 03:26:19 runner 6 connected 2025/09/11 03:26:21 runner 8 connected 2025/09/11 03:26:54 runner 9 connected 2025/09/11 03:27:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:27:34 base crash: WARNING in xfrm_state_fini 2025/09/11 03:28:13 runner 4 connected 2025/09/11 03:28:22 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:29:00 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:29:10 runner 8 connected 2025/09/11 03:29:18 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:29:21 base: boot error: can't ssh into the instance 2025/09/11 03:29:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 53, "corpus": 12968, "corpus [files]": 2138, "corpus [symbols]": 2181, "cover overflows": 15711, "coverage": 91924, "distributor delayed": 26737, "distributor undelayed": 26737, "distributor violated": 1900, "exec candidate": 29665, "exec collide": 55560, "exec fuzz": 105269, "exec gen": 5657, "exec hints": 17154, "exec inject": 0, "exec minimize": 2755, "exec retries": 189, "exec seeds": 321, "exec smash": 2632, "exec total [base]": 165490, "exec total [new]": 312736, "exec triage": 43530, "executor restarts [base]": 503, "executor restarts [new]": 978, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 0, "fuzzing VMs [new]": 3, "hints jobs": 0, "max signal": 96221, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1385, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13963, "no exec duration": 53050000000, "no exec requests": 240, "pending": 8, "prog exec time": 299, "reproducing": 2, "rpc recv": 15744529204, "rpc sent": 1798437160, "signal": 89868, "smash jobs": 0, "triage jobs": 0, "vm output": 22176205, "vm restarts [base]": 96, "vm restarts [new]": 180 } 2025/09/11 03:29:45 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:29:49 runner 6 connected 2025/09/11 03:30:07 runner 9 connected 2025/09/11 03:30:11 runner 3 connected 2025/09/11 03:30:25 new: boot error: can't ssh into the instance 2025/09/11 03:30:26 runner 8 connected 2025/09/11 03:30:45 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 03:31:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:31:25 base: boot error: can't ssh into the instance 2025/09/11 03:31:27 runner 3 connected 2025/09/11 03:32:09 runner 4 connected 2025/09/11 03:32:44 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:32:58 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 03:33:17 attempt #0 to run "KASAN: slab-out-of-bounds Write in compute_postorder" on base: did not crash 2025/09/11 03:33:34 runner 7 connected 2025/09/11 03:33:46 runner 6 connected 2025/09/11 03:33:47 base crash: WARNING in xfrm_state_fini 2025/09/11 03:34:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:34:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12971, "corpus [files]": 2138, "corpus [symbols]": 2182, "cover overflows": 16325, "coverage": 91927, "distributor delayed": 26776, "distributor undelayed": 26776, "distributor violated": 1901, "exec candidate": 29665, "exec collide": 58985, "exec fuzz": 111805, "exec gen": 5963, "exec hints": 17160, "exec inject": 0, "exec minimize": 2858, "exec retries": 198, "exec seeds": 327, "exec smash": 2686, "exec total [base]": 166876, "exec total [new]": 323248, "exec triage": 43601, "executor restarts [base]": 511, "executor restarts [new]": 1010, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 0, "fuzzing VMs [new]": 4, "hints jobs": 0, "max signal": 96324, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1440, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13987, "no exec duration": 53153000000, "no exec requests": 242, "pending": 8, "prog exec time": 259, "reproducing": 2, "rpc recv": 16057020960, "rpc sent": 1867553096, "signal": 89871, "smash jobs": 1, "triage jobs": 0, "vm output": 23069337, "vm restarts [base]": 98, "vm restarts [new]": 186 } 2025/09/11 03:34:53 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:35:01 runner 8 connected 2025/09/11 03:35:08 base: boot error: can't ssh into the instance 2025/09/11 03:35:13 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:35:34 new: boot error: can't ssh into the instance 2025/09/11 03:35:42 runner 7 connected 2025/09/11 03:35:57 runner 1 connected 2025/09/11 03:36:02 runner 4 connected 2025/09/11 03:36:04 new: boot error: can't ssh into the instance 2025/09/11 03:36:19 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 03:36:21 runner 5 connected 2025/09/11 03:36:27 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:36:43 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:36:53 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:36:54 runner 3 connected 2025/09/11 03:37:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:37:15 runner 8 connected 2025/09/11 03:37:32 runner 7 connected 2025/09/11 03:37:35 runner 4 connected 2025/09/11 03:37:40 base: boot error: can't ssh into the instance 2025/09/11 03:37:43 runner 9 connected 2025/09/11 03:38:29 runner 2 connected 2025/09/11 03:38:51 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 03:39:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:39:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:39:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12972, "corpus [files]": 2138, "corpus [symbols]": 2182, "cover overflows": 16875, "coverage": 91928, "distributor delayed": 26823, "distributor undelayed": 26821, "distributor violated": 1901, "exec candidate": 29665, "exec collide": 62291, "exec fuzz": 118095, "exec gen": 6302, "exec hints": 17174, "exec inject": 0, "exec minimize": 2890, "exec retries": 199, "exec seeds": 330, "exec smash": 2732, "exec total [base]": 169091, "exec total [new]": 333344, "exec triage": 43671, "executor restarts [base]": 519, "executor restarts [new]": 1040, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 2, "hints jobs": 0, "max signal": 96351, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1457, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14011, "no exec duration": 53153000000, "no exec requests": 242, "pending": 8, "prog exec time": 296, "reproducing": 2, "rpc recv": 16496257276, "rpc sent": 1941944176, "signal": 89872, "smash jobs": 0, "triage jobs": 3, "vm output": 24204329, "vm restarts [base]": 100, "vm restarts [new]": 195 } 2025/09/11 03:39:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:39:39 runner 7 connected 2025/09/11 03:39:46 base crash: WARNING in xfrm_state_fini 2025/09/11 03:39:51 runner 4 connected 2025/09/11 03:39:56 runner 9 connected 2025/09/11 03:40:12 runner 3 connected 2025/09/11 03:40:27 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:40:35 runner 1 connected 2025/09/11 03:41:01 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:41:13 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:41:34 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 03:41:35 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/11 03:41:49 runner 8 connected 2025/09/11 03:42:02 runner 9 connected 2025/09/11 03:42:15 runner 3 connected 2025/09/11 03:42:16 runner 2 connected 2025/09/11 03:42:51 base crash: WARNING in xfrm_state_fini 2025/09/11 03:42:59 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 03:43:10 base crash: WARNING in xfrm_state_fini 2025/09/11 03:43:19 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:43:23 base: boot error: can't ssh into the instance 2025/09/11 03:43:46 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:43:47 runner 7 connected 2025/09/11 03:43:53 base: boot error: can't ssh into the instance 2025/09/11 03:43:59 runner 2 connected 2025/09/11 03:44:08 runner 3 connected 2025/09/11 03:44:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12975, "corpus [files]": 2139, "corpus [symbols]": 2183, "cover overflows": 17394, "coverage": 91931, "distributor delayed": 26866, "distributor undelayed": 26866, "distributor violated": 1903, "exec candidate": 29665, "exec collide": 65439, "exec fuzz": 124016, "exec gen": 6614, "exec hints": 17217, "exec inject": 0, "exec minimize": 2921, "exec retries": 205, "exec seeds": 339, "exec smash": 2794, "exec total [base]": 171724, "exec total [new]": 342936, "exec triage": 43728, "executor restarts [base]": 529, "executor restarts [new]": 1082, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 3, "hints jobs": 1, "max signal": 96392, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1474, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14031, "no exec duration": 53422000000, "no exec requests": 244, "pending": 8, "prog exec time": 377, "reproducing": 2, "rpc recv": 16980115648, "rpc sent": 2015097000, "signal": 89875, "smash jobs": 0, "triage jobs": 1, "vm output": 25043182, "vm restarts [base]": 103, "vm restarts [new]": 204 } 2025/09/11 03:44:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:45:15 attempt #1 to run "KASAN: slab-out-of-bounds Write in compute_postorder" on base: did not crash 2025/09/11 03:45:21 runner 8 connected 2025/09/11 03:45:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:46:25 new: boot error: can't ssh into the instance 2025/09/11 03:47:06 attempt #2 to run "KASAN: slab-out-of-bounds Write in compute_postorder" on base: did not crash 2025/09/11 03:47:06 patched-only: KASAN: slab-out-of-bounds Write in compute_postorder 2025/09/11 03:47:06 scheduled a reproduction of 'KASAN: slab-out-of-bounds Write in compute_postorder (full)' 2025/09/11 03:47:06 start reproducing 'KASAN: slab-out-of-bounds Write in compute_postorder (full)' 2025/09/11 03:47:14 runner 6 connected 2025/09/11 03:47:55 runner 0 connected 2025/09/11 03:48:20 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 03:48:38 repro finished 'KASAN: slab-out-of-bounds Write in compute_postorder', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/09/11 03:48:38 failed repro for "KASAN: slab-out-of-bounds Write in compute_postorder", err=%!s() 2025/09/11 03:48:38 "KASAN: slab-out-of-bounds Write in compute_postorder": saved crash log into 1757562518.crash.log 2025/09/11 03:48:38 "KASAN: slab-out-of-bounds Write in compute_postorder": saved repro log into 1757562518.repro.log 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:38 reproduction of "KASAN: slab-out-of-bounds Write in compute_postorder" aborted: it's no longer needed 2025/09/11 03:48:41 base crash: INFO: task hung in __free_event 2025/09/11 03:49:09 new: boot error: can't ssh into the instance 2025/09/11 03:49:17 base crash "KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings" is already known 2025/09/11 03:49:17 patched crashed: KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings [need repro = false] 2025/09/11 03:49:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12979, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 17837, "coverage": 91935, "distributor delayed": 26897, "distributor undelayed": 26895, "distributor violated": 1908, "exec candidate": 29665, "exec collide": 68064, "exec fuzz": 128956, "exec gen": 6885, "exec hints": 17854, "exec inject": 0, "exec minimize": 3056, "exec retries": 212, "exec seeds": 349, "exec smash": 2894, "exec total [base]": 173393, "exec total [new]": 351708, "exec triage": 43779, "executor restarts [base]": 535, "executor restarts [new]": 1102, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 2, "hints jobs": 1, "max signal": 96419, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1538, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 1, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14049, "no exec duration": 53422000000, "no exec requests": 244, "pending": 0, "prog exec time": 208, "reproducing": 2, "rpc recv": 17144900668, "rpc sent": 2070833376, "signal": 89879, "smash jobs": 0, "triage jobs": 2, "vm output": 25717404, "vm restarts [base]": 104, "vm restarts [new]": 206 } 2025/09/11 03:49:31 runner 2 connected 2025/09/11 03:49:59 base crash "INFO: task hung in rdma_dev_change_netns" is already known 2025/09/11 03:49:59 patched crashed: INFO: task hung in rdma_dev_change_netns [need repro = false] 2025/09/11 03:50:06 runner 7 connected 2025/09/11 03:50:28 base crash: lost connection to test machine 2025/09/11 03:50:32 new: boot error: can't ssh into the instance 2025/09/11 03:50:47 runner 0 connected 2025/09/11 03:50:48 runner 8 connected 2025/09/11 03:51:21 runner 5 connected 2025/09/11 03:51:33 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 03:51:56 base crash: WARNING in xfrm_state_fini 2025/09/11 03:52:23 runner 6 connected 2025/09/11 03:52:38 runner 0 connected 2025/09/11 03:52:41 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:52:57 base: boot error: can't ssh into the instance 2025/09/11 03:53:33 base crash "KASAN: slab-out-of-bounds Write in __bpf_get_stackid" is already known 2025/09/11 03:53:33 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/09/11 03:53:46 runner 1 connected 2025/09/11 03:53:52 new: boot error: can't ssh into the instance 2025/09/11 03:53:58 base: boot error: can't ssh into the instance 2025/09/11 03:54:18 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:54:19 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 03:54:22 runner 8 connected 2025/09/11 03:54:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12979, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 18334, "coverage": 91935, "distributor delayed": 26927, "distributor undelayed": 26926, "distributor violated": 1909, "exec candidate": 29665, "exec collide": 70935, "exec fuzz": 134423, "exec gen": 7180, "exec hints": 18023, "exec inject": 0, "exec minimize": 3056, "exec retries": 216, "exec seeds": 349, "exec smash": 2894, "exec total [base]": 176353, "exec total [new]": 360556, "exec triage": 43826, "executor restarts [base]": 548, "executor restarts [new]": 1126, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 1, "hints jobs": 0, "max signal": 96447, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1538, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14063, "no exec duration": 53479000000, "no exec requests": 246, "pending": 0, "prog exec time": 291, "reproducing": 2, "rpc recv": 17515435660, "rpc sent": 2137792320, "signal": 89879, "smash jobs": 0, "triage jobs": 1, "vm output": 26551764, "vm restarts [base]": 107, "vm restarts [new]": 212 } 2025/09/11 03:54:39 runner 4 connected 2025/09/11 03:54:47 runner 3 connected 2025/09/11 03:55:07 runner 0 connected 2025/09/11 03:55:08 runner 6 connected 2025/09/11 03:55:37 new: boot error: can't ssh into the instance 2025/09/11 03:55:42 base crash: WARNING in xfrm_state_fini 2025/09/11 03:56:15 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:56:25 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 03:56:26 runner 9 connected 2025/09/11 03:56:31 runner 1 connected 2025/09/11 03:56:34 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 03:56:47 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:56:57 runner 8 connected 2025/09/11 03:57:00 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 03:57:15 runner 5 connected 2025/09/11 03:57:23 runner 3 connected 2025/09/11 03:57:24 patched crashed: INFO: rcu detected stall in security_file_ioctl [need repro = false] 2025/09/11 03:57:29 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 03:57:36 runner 0 connected 2025/09/11 03:57:37 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/11 03:57:50 runner 9 connected 2025/09/11 03:58:13 runner 6 connected 2025/09/11 03:58:19 runner 4 connected 2025/09/11 03:58:25 new: boot error: can't ssh into the instance 2025/09/11 03:58:27 runner 0 connected 2025/09/11 03:59:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12979, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 18860, "coverage": 91935, "distributor delayed": 26949, "distributor undelayed": 26949, "distributor violated": 1909, "exec candidate": 29665, "exec collide": 74122, "exec fuzz": 140324, "exec gen": 7516, "exec hints": 18023, "exec inject": 0, "exec minimize": 3062, "exec retries": 221, "exec seeds": 349, "exec smash": 2894, "exec total [base]": 181044, "exec total [new]": 370036, "exec triage": 43859, "executor restarts [base]": 571, "executor restarts [new]": 1172, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 96470, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1542, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14074, "no exec duration": 53480000000, "no exec requests": 247, "pending": 0, "prog exec time": 399, "reproducing": 2, "rpc recv": 18167477444, "rpc sent": 2224341736, "signal": 89879, "smash jobs": 0, "triage jobs": 1, "vm output": 27493616, "vm restarts [base]": 111, "vm restarts [new]": 222 } 2025/09/11 03:59:32 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 03:59:54 base crash: WARNING in xfrm_state_fini 2025/09/11 04:00:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:00:33 base: boot error: can't ssh into the instance 2025/09/11 04:00:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:00:39 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:00:44 runner 0 connected 2025/09/11 04:00:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:01:15 runner 8 connected 2025/09/11 04:01:22 runner 2 connected 2025/09/11 04:01:25 runner 0 connected 2025/09/11 04:01:25 base crash: WARNING in xfrm_state_fini 2025/09/11 04:01:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:01:43 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:01:46 runner 4 connected 2025/09/11 04:02:00 base crash: WARNING in xfrm_state_fini 2025/09/11 04:02:07 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:02:14 runner 3 connected 2025/09/11 04:02:23 runner 5 connected 2025/09/11 04:02:29 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:02:29 base crash: lost connection to test machine 2025/09/11 04:02:42 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:02:47 new: boot error: can't ssh into the instance 2025/09/11 04:02:47 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:02:48 runner 1 connected 2025/09/11 04:02:56 runner 9 connected 2025/09/11 04:03:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:03:17 runner 0 connected 2025/09/11 04:03:19 runner 2 connected 2025/09/11 04:03:49 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:03:51 runner 6 connected 2025/09/11 04:04:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12981, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 19479, "coverage": 91941, "distributor delayed": 26973, "distributor undelayed": 26973, "distributor violated": 1910, "exec candidate": 29665, "exec collide": 77966, "exec fuzz": 147284, "exec gen": 7889, "exec hints": 18405, "exec inject": 0, "exec minimize": 3136, "exec retries": 226, "exec seeds": 355, "exec smash": 2935, "exec total [base]": 186934, "exec total [new]": 381749, "exec triage": 43897, "executor restarts [base]": 595, "executor restarts [new]": 1202, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 5, "hints jobs": 1, "max signal": 96487, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1572, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14086, "no exec duration": 54471000000, "no exec requests": 250, "pending": 0, "prog exec time": 299, "reproducing": 2, "rpc recv": 18768966344, "rpc sent": 2323850112, "signal": 89884, "smash jobs": 0, "triage jobs": 1, "vm output": 28292340, "vm restarts [base]": 116, "vm restarts [new]": 229 } 2025/09/11 04:04:53 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:04:59 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 04:05:34 base crash: WARNING in xfrm_state_fini 2025/09/11 04:05:49 runner 2 connected 2025/09/11 04:05:51 new: boot error: can't ssh into the instance 2025/09/11 04:05:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:05:56 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:06:03 base crash: INFO: task hung in nfsd_nl_listener_set_doit 2025/09/11 04:06:23 runner 3 connected 2025/09/11 04:06:40 runner 0 connected 2025/09/11 04:06:52 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:06:59 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:07:06 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:07:17 base crash: lost connection to test machine 2025/09/11 04:07:24 base crash: INFO: rcu detected stall in sys_bpf 2025/09/11 04:07:34 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:07:47 runner 4 connected 2025/09/11 04:07:55 runner 9 connected 2025/09/11 04:08:05 runner 1 connected 2025/09/11 04:08:05 runner 3 connected 2025/09/11 04:08:07 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:08:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:08:09 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/11 04:08:23 runner 0 connected 2025/09/11 04:08:54 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:08:56 runner 5 connected 2025/09/11 04:08:58 runner 6 connected 2025/09/11 04:09:24 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:09:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12983, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 19960, "coverage": 91944, "distributor delayed": 26994, "distributor undelayed": 26994, "distributor violated": 1911, "exec candidate": 29665, "exec collide": 80923, "exec fuzz": 152831, "exec gen": 8178, "exec hints": 18449, "exec inject": 0, "exec minimize": 3190, "exec retries": 234, "exec seeds": 361, "exec smash": 2985, "exec total [base]": 192185, "exec total [new]": 390731, "exec triage": 43927, "executor restarts [base]": 614, "executor restarts [new]": 1235, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 4, "hints jobs": 0, "max signal": 96517, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1603, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14096, "no exec duration": 54471000000, "no exec requests": 250, "pending": 0, "prog exec time": 269, "reproducing": 2, "rpc recv": 19282753108, "rpc sent": 2406718680, "signal": 89887, "smash jobs": 0, "triage jobs": 0, "vm output": 29051032, "vm restarts [base]": 120, "vm restarts [new]": 235 } 2025/09/11 04:09:31 base crash: lost connection to test machine 2025/09/11 04:10:21 runner 2 connected 2025/09/11 04:10:39 reproducing crash 'no output/lost connection': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f kernel/bpf/verifier.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/11 04:10:39 repro finished 'KASAN: slab-out-of-bounds Write in compute_postorder (full)', repro=true crepro=true desc='KASAN: slab-out-of-bounds Write in compute_postorder' hub=false from_dashboard=false 2025/09/11 04:10:39 found repro for "KASAN: slab-out-of-bounds Write in compute_postorder" (orig title: "-SAME-", reliability: 1), took 23.55 minutes 2025/09/11 04:10:39 "KASAN: slab-out-of-bounds Write in compute_postorder": saved crash log into 1757563839.crash.log 2025/09/11 04:10:39 "KASAN: slab-out-of-bounds Write in compute_postorder": saved repro log into 1757563839.repro.log 2025/09/11 04:10:52 base crash: WARNING in xfrm_state_fini 2025/09/11 04:11:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:11:13 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:11:33 runner 3 connected 2025/09/11 04:12:01 runner 5 connected 2025/09/11 04:12:01 runner 6 connected 2025/09/11 04:12:02 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 04:12:24 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:12:47 new: boot error: can't ssh into the instance 2025/09/11 04:12:51 runner 1 connected 2025/09/11 04:12:52 new: boot error: can't ssh into the instance 2025/09/11 04:13:13 runner 0 connected 2025/09/11 04:13:16 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:13:24 runner 1 connected 2025/09/11 04:13:36 runner 8 connected 2025/09/11 04:13:57 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 04:13:59 base crash: WARNING in xfrm_state_fini 2025/09/11 04:14:05 runner 4 connected 2025/09/11 04:14:07 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:14:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12984, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 20496, "coverage": 91945, "distributor delayed": 27021, "distributor undelayed": 27021, "distributor violated": 1917, "exec candidate": 29665, "exec collide": 84132, "exec fuzz": 158973, "exec gen": 8480, "exec hints": 18461, "exec inject": 0, "exec minimize": 3194, "exec retries": 237, "exec seeds": 364, "exec smash": 2997, "exec total [base]": 197656, "exec total [new]": 400476, "exec triage": 43986, "executor restarts [base]": 632, "executor restarts [new]": 1263, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 1, "max signal": 96561, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1605, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14115, "no exec duration": 54983000000, "no exec requests": 256, "pending": 0, "prog exec time": 326, "reproducing": 1, "rpc recv": 19779778740, "rpc sent": 2496404392, "signal": 89888, "smash jobs": 1, "triage jobs": 0, "vm output": 29884491, "vm restarts [base]": 123, "vm restarts [new]": 241 } 2025/09/11 04:14:46 runner 1 connected 2025/09/11 04:14:49 runner 3 connected 2025/09/11 04:14:56 runner 5 connected 2025/09/11 04:16:01 base crash: WARNING in xfrm_state_fini 2025/09/11 04:16:01 new: boot error: can't ssh into the instance 2025/09/11 04:16:09 base: boot error: can't ssh into the instance 2025/09/11 04:16:17 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:16:41 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:16:47 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:16:50 runner 2 connected 2025/09/11 04:17:05 runner 6 connected 2025/09/11 04:17:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:17:22 runner 5 connected 2025/09/11 04:17:35 runner 0 connected 2025/09/11 04:17:41 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/11 04:17:48 repro finished 'INFO: task hung in nfsd_nl_listener_set_doit', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/09/11 04:17:48 failed repro for "INFO: task hung in nfsd_nl_listener_set_doit", err=%!s() 2025/09/11 04:17:48 "INFO: task hung in nfsd_nl_listener_set_doit": saved crash log into 1757564268.crash.log 2025/09/11 04:17:48 "INFO: task hung in nfsd_nl_listener_set_doit": saved repro log into 1757564268.repro.log 2025/09/11 04:17:49 runner 3 connected 2025/09/11 04:18:01 attempt #0 to run "KASAN: slab-out-of-bounds Write in compute_postorder" on base: did not crash 2025/09/11 04:18:10 runner 4 connected 2025/09/11 04:18:21 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:18:23 patched crashed: INFO: task hung in linkwatch_event [need repro = false] 2025/09/11 04:18:28 runner 3 connected 2025/09/11 04:18:37 runner 2 connected 2025/09/11 04:18:40 base crash: INFO: rcu detected stall in perf_event_open 2025/09/11 04:19:00 new: boot error: can't ssh into the instance 2025/09/11 04:19:10 runner 5 connected 2025/09/11 04:19:12 runner 1 connected 2025/09/11 04:19:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12992, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 21150, "coverage": 91955, "distributor delayed": 27082, "distributor undelayed": 27082, "distributor violated": 1918, "exec candidate": 29665, "exec collide": 88302, "exec fuzz": 166808, "exec gen": 8903, "exec hints": 18619, "exec inject": 0, "exec minimize": 3306, "exec retries": 246, "exec seeds": 388, "exec smash": 3191, "exec total [base]": 202716, "exec total [new]": 413509, "exec triage": 44089, "executor restarts [base]": 654, "executor restarts [new]": 1312, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 0, "max signal": 96609, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1649, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14148, "no exec duration": 55227000000, "no exec requests": 257, "pending": 0, "prog exec time": 308, "reproducing": 0, "rpc recv": 20397105364, "rpc sent": 2601209352, "signal": 89896, "smash jobs": 1, "triage jobs": 1, "vm output": 30933754, "vm restarts [base]": 127, "vm restarts [new]": 250 } 2025/09/11 04:19:29 runner 1 connected 2025/09/11 04:19:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:19:48 base crash: WARNING in xfrm_state_fini 2025/09/11 04:19:49 runner 9 connected 2025/09/11 04:19:53 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:19:54 attempt #1 to run "KASAN: slab-out-of-bounds Write in compute_postorder" on base: did not crash 2025/09/11 04:20:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:20:21 runner 2 connected 2025/09/11 04:20:37 runner 2 connected 2025/09/11 04:20:43 runner 6 connected 2025/09/11 04:20:55 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:20:57 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:20:59 runner 8 connected 2025/09/11 04:21:44 runner 0 connected 2025/09/11 04:21:45 patched crashed: INFO: rcu detected stall in __sock_create [need repro = false] 2025/09/11 04:21:46 attempt #2 to run "KASAN: slab-out-of-bounds Write in compute_postorder" on base: did not crash 2025/09/11 04:21:47 patched-only: KASAN: slab-out-of-bounds Write in compute_postorder 2025/09/11 04:21:47 runner 3 connected 2025/09/11 04:21:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:22:04 base crash: WARNING in xfrm_state_fini 2025/09/11 04:22:34 runner 4 connected 2025/09/11 04:22:35 runner 0 connected 2025/09/11 04:22:36 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:22:39 base crash: WARNING in xfrm_state_fini 2025/09/11 04:22:44 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 04:22:47 runner 1 connected 2025/09/11 04:22:53 runner 1 connected 2025/09/11 04:22:58 new: boot error: can't ssh into the instance 2025/09/11 04:23:17 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:23:26 runner 0 connected 2025/09/11 04:23:28 runner 2 connected 2025/09/11 04:23:35 runner 2 connected 2025/09/11 04:23:47 runner 7 connected 2025/09/11 04:24:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:24:07 runner 9 connected 2025/09/11 04:24:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:24:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12994, "corpus [files]": 2140, "corpus [symbols]": 2184, "cover overflows": 22087, "coverage": 91956, "distributor delayed": 27110, "distributor undelayed": 27110, "distributor violated": 1918, "exec candidate": 29665, "exec collide": 93820, "exec fuzz": 177433, "exec gen": 9456, "exec hints": 18654, "exec inject": 0, "exec minimize": 3323, "exec retries": 262, "exec seeds": 394, "exec smash": 3251, "exec total [base]": 209517, "exec total [new]": 430391, "exec triage": 44150, "executor restarts [base]": 676, "executor restarts [new]": 1375, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 8, "hints jobs": 0, "max signal": 96641, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1657, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14168, "no exec duration": 55517000000, "no exec requests": 261, "pending": 0, "prog exec time": 400, "reproducing": 0, "rpc recv": 21202692932, "rpc sent": 2739012672, "signal": 89897, "smash jobs": 0, "triage jobs": 0, "vm output": 32139769, "vm restarts [base]": 132, "vm restarts [new]": 262 } 2025/09/11 04:24:32 base crash: WARNING in xfrm_state_fini 2025/09/11 04:24:43 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:24:48 base crash: WARNING in xfrm_state_fini 2025/09/11 04:24:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:24:57 runner 3 connected 2025/09/11 04:25:09 runner 8 connected 2025/09/11 04:25:32 runner 4 connected 2025/09/11 04:25:36 runner 2 connected 2025/09/11 04:25:36 runner 5 connected 2025/09/11 04:26:20 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 04:27:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:27:09 runner 1 connected 2025/09/11 04:27:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:27:23 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:27:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:27:40 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/09/11 04:27:51 base crash: WARNING in xfrm_state_fini 2025/09/11 04:27:56 runner 6 connected 2025/09/11 04:28:03 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:28:09 runner 2 connected 2025/09/11 04:28:13 runner 9 connected 2025/09/11 04:28:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:28:29 runner 3 connected 2025/09/11 04:28:41 runner 1 connected 2025/09/11 04:28:53 runner 5 connected 2025/09/11 04:29:04 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:29:08 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/11 04:29:16 runner 7 connected 2025/09/11 04:29:20 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:29:20 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 04:29:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 56, "corpus": 12997, "corpus [files]": 2141, "corpus [symbols]": 2185, "cover overflows": 23146, "coverage": 91958, "distributor delayed": 27166, "distributor undelayed": 27166, "distributor violated": 1918, "exec candidate": 29665, "exec collide": 100384, "exec fuzz": 190016, "exec gen": 10088, "exec hints": 19354, "exec inject": 0, "exec minimize": 3443, "exec retries": 271, "exec seeds": 403, "exec smash": 3326, "exec total [base]": 215142, "exec total [new]": 451203, "exec triage": 44276, "executor restarts [base]": 694, "executor restarts [new]": 1423, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 7, "hints jobs": 2, "max signal": 96773, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1710, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14210, "no exec duration": 56099000000, "no exec requests": 267, "pending": 0, "prog exec time": 284, "reproducing": 0, "rpc recv": 21841220332, "rpc sent": 2887349472, "signal": 89899, "smash jobs": 0, "triage jobs": 1, "vm output": 33505806, "vm restarts [base]": 135, "vm restarts [new]": 272 } 2025/09/11 04:29:58 runner 0 connected 2025/09/11 04:30:16 runner 4 connected 2025/09/11 04:30:16 runner 2 connected 2025/09/11 04:30:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:30:30 patched crashed: general protection fault in __xfrm_state_insert [need repro = false] 2025/09/11 04:30:39 patched crashed: general protection fault in __xfrm_state_insert [need repro = false] 2025/09/11 04:30:54 base crash: lost connection to test machine 2025/09/11 04:30:59 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:31:10 runner 2 connected 2025/09/11 04:31:19 runner 9 connected 2025/09/11 04:31:28 runner 3 connected 2025/09/11 04:31:43 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:31:44 runner 1 connected 2025/09/11 04:31:48 runner 5 connected 2025/09/11 04:32:02 base crash: lost connection to test machine 2025/09/11 04:32:51 runner 0 connected 2025/09/11 04:32:56 base crash: WARNING in xfrm_state_fini 2025/09/11 04:33:06 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/11 04:33:15 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/11 04:33:39 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:33:40 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:33:46 runner 2 connected 2025/09/11 04:33:55 runner 7 connected 2025/09/11 04:34:04 runner 9 connected 2025/09/11 04:34:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:34:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 59, "corpus": 12999, "corpus [files]": 2141, "corpus [symbols]": 2185, "cover overflows": 23767, "coverage": 91964, "distributor delayed": 27178, "distributor undelayed": 27177, "distributor violated": 1918, "exec candidate": 29665, "exec collide": 104611, "exec fuzz": 198081, "exec gen": 10507, "exec hints": 19790, "exec inject": 0, "exec minimize": 3491, "exec retries": 284, "exec seeds": 409, "exec smash": 3372, "exec total [base]": 220360, "exec total [new]": 464474, "exec triage": 44304, "executor restarts [base]": 722, "executor restarts [new]": 1481, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 4, "hints jobs": 1, "max signal": 96904, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1738, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14220, "no exec duration": 56325000000, "no exec requests": 271, "pending": 0, "prog exec time": 295, "reproducing": 0, "rpc recv": 22420423308, "rpc sent": 2990550496, "signal": 89902, "smash jobs": 1, "triage jobs": 1, "vm output": 34415201, "vm restarts [base]": 140, "vm restarts [new]": 279 } 2025/09/11 04:34:28 runner 4 connected 2025/09/11 04:34:38 base: boot error: can't ssh into the instance 2025/09/11 04:34:51 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 04:34:55 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/11 04:34:56 base crash: WARNING in xfrm_state_fini 2025/09/11 04:35:00 runner 2 connected 2025/09/11 04:35:26 runner 3 connected 2025/09/11 04:35:39 runner 5 connected 2025/09/11 04:35:44 runner 8 connected 2025/09/11 04:35:45 runner 1 connected 2025/09/11 04:37:11 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/11 04:37:31 new: boot error: can't ssh into the instance 2025/09/11 04:37:39 patched crashed: INFO: rcu detected stall in perf_event_open [need repro = false] 2025/09/11 04:38:00 runner 0 connected 2025/09/11 04:38:16 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 04:38:19 runner 0 connected 2025/09/11 04:38:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:38:32 base crash: lost connection to test machine 2025/09/11 04:39:06 runner 4 connected 2025/09/11 04:39:09 new: boot error: can't ssh into the instance 2025/09/11 04:39:13 runner 9 connected 2025/09/11 04:39:14 patched crashed: INFO: rcu detected stall in stack_depot_save_flags [need repro = false] 2025/09/11 04:39:14 runner 0 connected 2025/09/11 04:39:18 base crash: WARNING in xfrm_state_fini 2025/09/11 04:39:26 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 59, "corpus": 13002, "corpus [files]": 2141, "corpus [symbols]": 2185, "cover overflows": 24387, "coverage": 91979, "distributor delayed": 27205, "distributor undelayed": 27205, "distributor violated": 1918, "exec candidate": 29665, "exec collide": 108140, "exec fuzz": 205003, "exec gen": 10880, "exec hints": 20150, "exec inject": 0, "exec minimize": 3570, "exec retries": 296, "exec seeds": 418, "exec smash": 3442, "exec total [base]": 228154, "exec total [new]": 475873, "exec triage": 44347, "executor restarts [base]": 752, "executor restarts [new]": 1516, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 4, "hints jobs": 2, "max signal": 96960, "minimize: array": 0, "minimize: buffer": 1, "minimize: call": 1772, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 4, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14234, "no exec duration": 57111000000, "no exec requests": 273, "pending": 0, "prog exec time": 273, "reproducing": 0, "rpc recv": 23068885412, "rpc sent": 3098304008, "signal": 89907, "smash jobs": 2, "triage jobs": 0, "vm output": 35168528, "vm restarts [base]": 144, "vm restarts [new]": 286 } 2025/09/11 04:39:45 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:39:58 runner 1 connected 2025/09/11 04:40:02 runner 2 connected 2025/09/11 04:40:09 runner 2 connected 2025/09/11 04:40:17 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:40:29 base crash: INFO: rcu detected stall in sys_sendmsg 2025/09/11 04:40:30 base crash: WARNING in xfrm_state_fini 2025/09/11 04:40:41 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:40:46 patched crashed: lost connection to test machine [need repro = false] 2025/09/11 04:40:49 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 04:40:58 runner 9 connected 2025/09/11 04:41:19 runner 1 connected 2025/09/11 04:41:19 runner 3 connected 2025/09/11 04:41:19 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:41:21 base crash: lost connection to test machine 2025/09/11 04:41:22 runner 2 connected 2025/09/11 04:41:34 runner 4 connected 2025/09/11 04:41:37 runner 0 connected 2025/09/11 04:41:48 new: boot error: can't ssh into the instance 2025/09/11 04:42:08 runner 5 connected 2025/09/11 04:42:10 runner 2 connected 2025/09/11 04:42:18 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:42:37 runner 6 connected 2025/09/11 04:42:46 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/11 04:43:06 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/11 04:43:06 runner 1 connected 2025/09/11 04:43:27 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/11 04:43:35 runner 0 connected 2025/09/11 04:43:37 base crash: WARNING in xfrm_state_fini 2025/09/11 04:43:45 new: boot error: can't ssh into the instance 2025/09/11 04:43:56 runner 4 connected 2025/09/11 04:44:00 base crash: WARNING in xfrm_state_fini 2025/09/11 04:44:14 base crash: WARNING in xfrm_state_fini 2025/09/11 04:44:16 runner 9 connected 2025/09/11 04:44:23 status reporting terminated 2025/09/11 04:44:23 bug reporting terminated 2025/09/11 04:44:23 failed to send *flatrpc.InfoReplyRawT: write tcp 127.0.0.1:45753->127.0.0.1:53506: use of closed network connection 2025/09/11 04:44:55 syz-diff (base): kernel context loop terminated 2025/09/11 04:49:51 syz-diff (new): kernel context loop terminated 2025/09/11 04:49:51 diff fuzzing terminated 2025/09/11 04:49:51 fuzzing is finished 2025/09/11 04:49:51 status at the end: Title On-Base On-Patched KASAN: slab-out-of-bounds Write in compute_postorder 11 crashes[reproduced] INFO: rcu detected stall in __sock_create 1 crashes 1 crashes INFO: rcu detected stall in corrupted 1 crashes INFO: rcu detected stall in perf_event_open 1 crashes 2 crashes INFO: rcu detected stall in ppp_ioctl 1 crashes INFO: rcu detected stall in security_file_ioctl 1 crashes INFO: rcu detected stall in smp_call_function 1 crashes INFO: rcu detected stall in stack_depot_save_flags 1 crashes INFO: rcu detected stall in sys_bpf 1 crashes INFO: rcu detected stall in sys_clone 1 crashes INFO: rcu detected stall in sys_sendmsg 1 crashes INFO: task hung in __free_event 2 crashes INFO: task hung in addrconf_verify_work 1 crashes INFO: task hung in linkwatch_event 1 crashes 1 crashes INFO: task hung in nfsd_nl_listener_set_doit 1 crashes 1 crashes INFO: task hung in rdma_dev_change_netns 1 crashes KASAN: slab-out-of-bounds Write in __bpf_get_stackid 1 crashes KASAN: slab-use-after-free Read in __ethtool_get_link_ksettings 1 crashes KASAN: slab-use-after-free Read in __xfrm_state_insert 1 crashes KASAN: slab-use-after-free Read in __xfrm_state_lookup 8 crashes 17 crashes KASAN: slab-use-after-free Read in xfrm_alloc_spi 13 crashes 26 crashes KASAN: slab-use-after-free Read in xfrm_state_find 1 crashes KASAN: slab-use-after-free Write in __xfrm_state_delete 1 crashes 1 crashes SYZFAIL: repeatedly failed to execute the program 2 crashes WARNING in reg_bounds_sanity_check 6 crashes 9 crashes WARNING in xfrm6_tunnel_net_exit 7 crashes 5 crashes WARNING in xfrm_state_fini 73 crashes 159 crashes general protection fault in __xfrm_state_insert 1 crashes 2 crashes lost connection to test machine 25 crashes 30 crashes unregister_netdevice: waiting for DEV to become free 5 crashes 10 crashes 2025/09/11 04:49:51 possibly patched-only: KASAN: slab-out-of-bounds Write in compute_postorder