2025/08/16 23:06:54 extracted 303751 symbol hashes for base and 303751 for patched 2025/08/16 23:06:54 adding modified_functions to focus areas: ["__add_used_btf" "__btf_type_is_scalar_struct" "__check_mem_access" "__check_ptr_off_reg" "__check_reg_arg" "__process_kf_arg_ptr_to_graph_node" "__process_kf_arg_ptr_to_graph_root" "add_kfunc_call" "add_subprog" "add_subprog_and_kfunc" "add_used_map" "adjust_ptr_min_max_vals" "adjust_reg_min_max_vals" "bpf_check" "bpf_patch_insn_data" "check_bpf_snprintf_call" "check_buffer_access" "check_cfg" "check_cond_jmp_op" "check_ctx_access" "check_func_arg_reg_off" "check_func_call" "check_get_func_ip" "check_helper_call" "check_helper_mem_access" "check_kfunc_call" "check_ld_imm" "check_load_mem" "check_map_access" "check_map_func_compatibility" "check_map_kptr_access" "check_mem_access" "check_mem_region_access" "check_mem_size_reg" "check_packet_access" "check_pseudo_btf_id" "check_ptr_alignment" "check_ptr_to_btf_access" "check_ptr_to_map_access" "check_reg_const_str" "check_reg_sane_offset" "check_reg_type" "check_resource_leak" "check_return_code" "check_sock_access" "check_special_kfunc" "check_stack_access_within_bounds" "check_stack_range_initialized" "check_stack_read" "check_stack_write" "check_store_reg" "check_tp_buffer_access" "compute_live_registers" "destroy_if_dynptr_stack_slot" "do_check" "do_check_common" "do_check_subprogs" "dynptr_get_type" "fetch_kfunc_meta" "fixup_kfunc_call" "get_constant_map_key" "get_dynptr_arg_reg" "map_kptr_match_type" "mark_fastcall_patterns" "mark_reg_known_zero" "mark_reg_not_init" "mark_reg_unknown" "may_update_sockmap" "nvmet_execute_disc_identify" "process_bpf_exit_full" "process_dynptr_func" "process_irq_flag" "process_iter_arg" "process_iter_next_call" "process_kf_arg_ptr_to_btf_id" "process_kptr_func" "process_spin_lock" "process_timer_func" "process_wq_func" "propagate_precision" "push_callback_call" "push_insn" "push_stack" "record_func_key" "record_func_map" "resolve_pseudo_ldimm64" "sanitize_check_bounds" "sanitize_err" "sanitize_ptr_alu" "sanitize_speculative_path" "save_aux_ptr_type" "set_map_elem_callback_state" "setup_func_entry" "stack_slot_obj_get_spi" "update_loop_inline_state" "verbose_invalid_scalar"] 2025/08/16 23:06:54 adding directly modified files to focus areas: ["kernel/bpf/verifier.c"] 2025/08/16 23:06:54 downloaded the corpus from https://storage.googleapis.com/syzkaller/corpus/ci-upstream-bpf-kasan-gce-corpus.db 2025/08/16 23:07:52 runner 0 connected 2025/08/16 23:07:52 runner 4 connected 2025/08/16 23:07:52 runner 7 connected 2025/08/16 23:07:52 runner 1 connected 2025/08/16 23:07:52 runner 3 connected 2025/08/16 23:07:52 runner 9 connected 2025/08/16 23:07:52 runner 2 connected 2025/08/16 23:07:52 runner 3 connected 2025/08/16 23:07:53 runner 8 connected 2025/08/16 23:07:53 runner 6 connected 2025/08/16 23:07:53 runner 5 connected 2025/08/16 23:07:53 runner 0 connected 2025/08/16 23:07:54 runner 1 connected 2025/08/16 23:08:00 initializing coverage information... 2025/08/16 23:08:01 executor cover filter: 0 PCs 2025/08/16 23:08:03 machine check: disabled the following syscalls: socket$hf : socket$hf(0x13, 0x2, 0x0) failed: address family not supported by protocol socket$inet6_dccp : socket$inet6_dccp(0xa, 0x6, 0x0) failed: socket type not supported socket$inet_dccp : socket$inet_dccp(0x2, 0x6, 0x0) failed: socket type not supported socket$vsock_dgram : socket$vsock_dgram(0x28, 0x2, 0x0) failed: no such device transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] recvmsg$hf : sock_hf [socket$hf] recvmsg$inet_nvme : nvme_sock [syz_socket_connect_nvme_tcp] sendmsg$802154_dgram : sock_802154_dgram [syz_init_net_socket$802154_dgram] sendmsg$802154_raw : sock_802154_raw [syz_init_net_socket$802154_raw] sendmsg$BATADV_CMD_GET_BLA_BACKBONE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_BLA_CLAIM : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_DAT_CACHE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_GATEWAYS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MCAST_FLAGS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_NEIGHBORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ORIGINATORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ROUTING_ALGOS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER_CANCEL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$DEVLINK_CMD_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_UNSPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_DEL : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_NEW : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RELOAD : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$ETHTOOL_MSG_CHANNELS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_CHANNELS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKSTATE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_STRSET_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_TSINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$FOU_CMD_ADD : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_DEL : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_GET : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$GTP_CMD_DELPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_ECHOREQ : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_GETPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_NEWPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$IEEE802154_ADD_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_RESP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_DISASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_GETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_SETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SCAN_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SET_MACPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_START_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IPVS_CMD_DEL_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_FLUSH : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_ZERO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$L2TP_CMD_NOOP : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$MPTCP_PM_CMD_ADD_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_ANNOUNCE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_DEL_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_REMOVE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_FLAGS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$NBD_CMD_CONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_DISCONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_RECONFIGURE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_STATUS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_START : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_STOP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DISABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ENABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_FW_DOWNLOAD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_DEVICE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_GET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SDREQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_SE_IO : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_START_POLL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_VENDOR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL80211_CMD_ABORT_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_AUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONTROL_PORT_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEAUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISCONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_EXTERNAL_AUTH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FLUSH_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SURVEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NOTIFY_RADAR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PEER_MEASUREMENT_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_CLIENT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_MESH_LINK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RADAR_DETECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_BEACONS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RELOAD_REGDB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REQ_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BEACON : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CQM : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MAC_ACL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MCAST_RATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_NOACK_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_QOS_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TID_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WDS_PEER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY_NETNS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_MGMT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_OPER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TESTMODE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TRIGGER_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UNEXPECTED_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_FT_IES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_OWE_INFO : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_VENDOR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL802154_CMD_DEL_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_WPAN_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CHANNEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_LBT_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_PAN_ID : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SEC_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SHORT_ADDR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_TX_POWER : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_PROTOCOLS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_VERSION : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_ACCEPT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$SEG6_CMD_DUMPHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_GET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SETHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SMC_PNETID_ADD : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_DEL : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_FLUSH : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_GET : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$TEAM_CMD_NOOP : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_SET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_PORT_LIST_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TIPC_CMD_DISABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_ENABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_BEARER_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_LINKS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MAX_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MEDIA_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NODES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_REMOTE_MNG : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_RESET_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_PRI : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_TOL : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_WINDOW : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NODE_ADDR : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_NAME_TABLE : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_NL_BEARER_ADD : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_DISABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_ENABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_FLUSH : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_RESET_STATS : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_PEER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NAME_TABLE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NODE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PEER_REMOVE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PUBL_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_SOCK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_UDP_GET_REMOTEIP : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$WG_CMD_GET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$WG_CMD_SET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$alg : sock_algconn [accept$alg accept4$alg] sendmsg$can_bcm : timespec [clock_gettime] sendmsg$hf : sock_hf [socket$hf] sendmsg$nfc_llcp : sock_nfc_llcp [accept$nfc_llcp accept4$nfc_llcp syz_init_net_socket$nfc_llcp] sendmsg$nl_route : ifindex_vcan [ioctl$ifreq_SIOCGIFINDEX_vcan] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 311/8048 2025/08/16 23:08:03 base: machine check complete 2025/08/16 23:08:05 discovered 7699 source files, 338620 symbols 2025/08/16 23:08:06 coverage filter: __add_used_btf: [__add_used_btf] 2025/08/16 23:08:06 coverage filter: __btf_type_is_scalar_struct: [__btf_type_is_scalar_struct] 2025/08/16 23:08:06 coverage filter: __check_mem_access: [__check_mem_access] 2025/08/16 23:08:06 coverage filter: __check_ptr_off_reg: [__check_ptr_off_reg] 2025/08/16 23:08:06 coverage filter: __check_reg_arg: [__check_reg_arg] 2025/08/16 23:08:06 coverage filter: __process_kf_arg_ptr_to_graph_node: [__process_kf_arg_ptr_to_graph_node] 2025/08/16 23:08:06 coverage filter: __process_kf_arg_ptr_to_graph_root: [__process_kf_arg_ptr_to_graph_root] 2025/08/16 23:08:06 coverage filter: add_kfunc_call: [add_kfunc_call] 2025/08/16 23:08:06 coverage filter: add_subprog: [add_subprog add_subprog_and_kfunc] 2025/08/16 23:08:06 coverage filter: add_subprog_and_kfunc: [] 2025/08/16 23:08:06 coverage filter: add_used_map: [__add_used_map add_used_map] 2025/08/16 23:08:06 coverage filter: adjust_ptr_min_max_vals: [adjust_ptr_min_max_vals] 2025/08/16 23:08:06 coverage filter: adjust_reg_min_max_vals: [adjust_reg_min_max_vals] 2025/08/16 23:08:06 coverage filter: bpf_check: [bpf_check bpf_check_attach_target bpf_check_timed_may_goto bpf_check_uarg_tail_zero cookie_bpf_check] 2025/08/16 23:08:06 coverage filter: bpf_patch_insn_data: [bpf_patch_insn_data] 2025/08/16 23:08:06 coverage filter: check_bpf_snprintf_call: [check_bpf_snprintf_call] 2025/08/16 23:08:06 coverage filter: check_buffer_access: [check_buffer_access] 2025/08/16 23:08:06 coverage filter: check_cfg: [check_cfg] 2025/08/16 23:08:06 coverage filter: check_cond_jmp_op: [check_cond_jmp_op] 2025/08/16 23:08:06 coverage filter: check_ctx_access: [check_ctx_access] 2025/08/16 23:08:06 coverage filter: check_func_arg_reg_off: [check_func_arg_reg_off] 2025/08/16 23:08:06 coverage filter: check_func_call: [check_func_call] 2025/08/16 23:08:06 coverage filter: check_get_func_ip: [check_get_func_ip] 2025/08/16 23:08:06 coverage filter: check_helper_call: [check_helper_call] 2025/08/16 23:08:06 coverage filter: check_helper_mem_access: [check_helper_mem_access] 2025/08/16 23:08:06 coverage filter: check_kfunc_call: [check_kfunc_call] 2025/08/16 23:08:06 coverage filter: check_ld_imm: [check_ld_imm] 2025/08/16 23:08:06 coverage filter: check_load_mem: [check_load_mem] 2025/08/16 23:08:06 coverage filter: check_map_access: [check_map_access] 2025/08/16 23:08:06 coverage filter: check_map_func_compatibility: [check_map_func_compatibility] 2025/08/16 23:08:06 coverage filter: check_map_kptr_access: [check_map_kptr_access] 2025/08/16 23:08:06 coverage filter: check_mem_access: [check_mem_access] 2025/08/16 23:08:06 coverage filter: check_mem_region_access: [check_mem_region_access] 2025/08/16 23:08:06 coverage filter: check_mem_size_reg: [check_mem_size_reg] 2025/08/16 23:08:06 coverage filter: check_packet_access: [check_packet_access] 2025/08/16 23:08:06 coverage filter: check_pseudo_btf_id: [check_pseudo_btf_id] 2025/08/16 23:08:06 coverage filter: check_ptr_alignment: [check_ptr_alignment] 2025/08/16 23:08:06 coverage filter: check_ptr_to_btf_access: [check_ptr_to_btf_access] 2025/08/16 23:08:06 coverage filter: check_ptr_to_map_access: [check_ptr_to_map_access] 2025/08/16 23:08:06 coverage filter: check_reg_const_str: [check_reg_const_str] 2025/08/16 23:08:06 coverage filter: check_reg_sane_offset: [check_reg_sane_offset] 2025/08/16 23:08:06 coverage filter: check_reg_type: [check_reg_type] 2025/08/16 23:08:06 coverage filter: check_resource_leak: [check_resource_leak] 2025/08/16 23:08:06 coverage filter: check_return_code: [check_return_code] 2025/08/16 23:08:06 coverage filter: check_sock_access: [check_sock_access] 2025/08/16 23:08:06 coverage filter: check_special_kfunc: [check_special_kfunc] 2025/08/16 23:08:06 coverage filter: check_stack_access_within_bounds: [check_stack_access_within_bounds] 2025/08/16 23:08:06 coverage filter: check_stack_range_initialized: [check_stack_range_initialized] 2025/08/16 23:08:06 coverage filter: check_stack_read: [check_stack_read] 2025/08/16 23:08:06 coverage filter: check_stack_write: [check_stack_write] 2025/08/16 23:08:06 coverage filter: check_store_reg: [check_store_reg] 2025/08/16 23:08:06 coverage filter: check_tp_buffer_access: [check_tp_buffer_access] 2025/08/16 23:08:06 coverage filter: compute_live_registers: [compute_live_registers] 2025/08/16 23:08:06 coverage filter: destroy_if_dynptr_stack_slot: [destroy_if_dynptr_stack_slot] 2025/08/16 23:08:06 coverage filter: do_check: [do_check do_check_common do_check_subprogs do_checkpoint jbd2_log_do_checkpoint nfs4_do_check_delegation xdp_do_check_flushed] 2025/08/16 23:08:06 coverage filter: do_check_common: [] 2025/08/16 23:08:06 coverage filter: do_check_subprogs: [] 2025/08/16 23:08:06 coverage filter: dynptr_get_type: [dynptr_get_type] 2025/08/16 23:08:06 coverage filter: fetch_kfunc_meta: [fetch_kfunc_meta] 2025/08/16 23:08:06 coverage filter: fixup_kfunc_call: [fixup_kfunc_call] 2025/08/16 23:08:06 coverage filter: get_constant_map_key: [get_constant_map_key] 2025/08/16 23:08:06 coverage filter: get_dynptr_arg_reg: [get_dynptr_arg_reg] 2025/08/16 23:08:06 coverage filter: map_kptr_match_type: [map_kptr_match_type] 2025/08/16 23:08:06 coverage filter: mark_fastcall_patterns: [mark_fastcall_patterns] 2025/08/16 23:08:06 coverage filter: mark_reg_known_zero: [mark_reg_known_zero] 2025/08/16 23:08:06 coverage filter: mark_reg_not_init: [__mark_reg_not_init mark_reg_not_init] 2025/08/16 23:08:06 coverage filter: mark_reg_unknown: [__mark_reg_unknown mark_reg_unknown] 2025/08/16 23:08:06 coverage filter: may_update_sockmap: [may_update_sockmap] 2025/08/16 23:08:06 coverage filter: nvmet_execute_disc_identify: [nvmet_execute_disc_identify] 2025/08/16 23:08:06 coverage filter: process_bpf_exit_full: [process_bpf_exit_full] 2025/08/16 23:08:06 coverage filter: process_dynptr_func: [process_dynptr_func] 2025/08/16 23:08:06 coverage filter: process_irq_flag: [process_irq_flag] 2025/08/16 23:08:06 coverage filter: process_iter_arg: [process_iter_arg] 2025/08/16 23:08:06 coverage filter: process_iter_next_call: [process_iter_next_call] 2025/08/16 23:08:06 coverage filter: process_kf_arg_ptr_to_btf_id: [process_kf_arg_ptr_to_btf_id] 2025/08/16 23:08:06 coverage filter: process_kptr_func: [process_kptr_func] 2025/08/16 23:08:06 coverage filter: process_spin_lock: [process_spin_lock] 2025/08/16 23:08:06 coverage filter: process_timer_func: [process_timer_func] 2025/08/16 23:08:06 coverage filter: process_wq_func: [process_wq_func] 2025/08/16 23:08:06 coverage filter: propagate_precision: [propagate_precision] 2025/08/16 23:08:06 coverage filter: push_callback_call: [push_callback_call] 2025/08/16 23:08:06 coverage filter: push_insn: [push_insn] 2025/08/16 23:08:06 coverage filter: push_stack: [push_stack] 2025/08/16 23:08:06 coverage filter: record_func_key: [record_func_key] 2025/08/16 23:08:06 coverage filter: record_func_map: [record_func_map] 2025/08/16 23:08:06 coverage filter: resolve_pseudo_ldimm64: [resolve_pseudo_ldimm64] 2025/08/16 23:08:06 coverage filter: sanitize_check_bounds: [sanitize_check_bounds] 2025/08/16 23:08:06 coverage filter: sanitize_err: [sanitize_err] 2025/08/16 23:08:06 coverage filter: sanitize_ptr_alu: [sanitize_ptr_alu] 2025/08/16 23:08:06 coverage filter: sanitize_speculative_path: [sanitize_speculative_path] 2025/08/16 23:08:06 coverage filter: save_aux_ptr_type: [save_aux_ptr_type] 2025/08/16 23:08:06 coverage filter: set_map_elem_callback_state: [set_map_elem_callback_state] 2025/08/16 23:08:06 coverage filter: setup_func_entry: [setup_func_entry] 2025/08/16 23:08:06 coverage filter: stack_slot_obj_get_spi: [stack_slot_obj_get_spi] 2025/08/16 23:08:06 coverage filter: update_loop_inline_state: [update_loop_inline_state] 2025/08/16 23:08:06 coverage filter: verbose_invalid_scalar: [verbose_invalid_scalar] 2025/08/16 23:08:06 coverage filter: kernel/bpf/verifier.c: [kernel/bpf/verifier.c] 2025/08/16 23:08:06 area "symbols": 8118 PCs in the cover filter 2025/08/16 23:08:06 area "files": 11770 PCs in the cover filter 2025/08/16 23:08:06 area "": 0 PCs in the cover filter 2025/08/16 23:08:06 executor cover filter: 0 PCs 2025/08/16 23:08:08 machine check: disabled the following syscalls: socket$hf : socket$hf(0x13, 0x2, 0x0) failed: address family not supported by protocol socket$inet6_dccp : socket$inet6_dccp(0xa, 0x6, 0x0) failed: socket type not supported socket$inet_dccp : socket$inet_dccp(0x2, 0x6, 0x0) failed: socket type not supported socket$vsock_dgram : socket$vsock_dgram(0x28, 0x2, 0x0) failed: no such device transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] recvmsg$hf : sock_hf [socket$hf] recvmsg$inet_nvme : nvme_sock [syz_socket_connect_nvme_tcp] sendmsg$802154_dgram : sock_802154_dgram [syz_init_net_socket$802154_dgram] sendmsg$802154_raw : sock_802154_raw [syz_init_net_socket$802154_raw] sendmsg$BATADV_CMD_GET_BLA_BACKBONE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_BLA_CLAIM : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_DAT_CACHE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_GATEWAYS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MCAST_FLAGS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_NEIGHBORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ORIGINATORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ROUTING_ALGOS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER_CANCEL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$DEVLINK_CMD_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_UNSPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_DEL : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_NEW : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RELOAD : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$ETHTOOL_MSG_CHANNELS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_CHANNELS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKSTATE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_STRSET_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_TSINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$FOU_CMD_ADD : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_DEL : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_GET : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$GTP_CMD_DELPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_ECHOREQ : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_GETPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_NEWPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$IEEE802154_ADD_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_RESP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_DISASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_GETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_SETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SCAN_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SET_MACPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_START_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IPVS_CMD_DEL_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_FLUSH : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_ZERO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$L2TP_CMD_NOOP : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$MPTCP_PM_CMD_ADD_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_ANNOUNCE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_DEL_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_REMOVE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_FLAGS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$NBD_CMD_CONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_DISCONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_RECONFIGURE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_STATUS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_START : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_STOP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DISABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ENABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_FW_DOWNLOAD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_DEVICE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_GET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SDREQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_SE_IO : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_START_POLL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_VENDOR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL80211_CMD_ABORT_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_AUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONTROL_PORT_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEAUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISCONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_EXTERNAL_AUTH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FLUSH_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SURVEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NOTIFY_RADAR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PEER_MEASUREMENT_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_CLIENT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_MESH_LINK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RADAR_DETECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_BEACONS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RELOAD_REGDB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REQ_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BEACON : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CQM : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MAC_ACL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MCAST_RATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_NOACK_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_QOS_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TID_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WDS_PEER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY_NETNS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_MGMT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_OPER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TESTMODE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TRIGGER_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UNEXPECTED_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_FT_IES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_OWE_INFO : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_VENDOR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL802154_CMD_DEL_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_WPAN_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CHANNEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_LBT_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_PAN_ID : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SEC_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SHORT_ADDR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_TX_POWER : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_PROTOCOLS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_VERSION : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_ACCEPT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$SEG6_CMD_DUMPHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_GET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SETHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SMC_PNETID_ADD : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_DEL : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_FLUSH : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_GET : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$TEAM_CMD_NOOP : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_SET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_PORT_LIST_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TIPC_CMD_DISABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_ENABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_BEARER_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_LINKS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MAX_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MEDIA_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NODES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_REMOTE_MNG : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_RESET_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_PRI : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_TOL : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_WINDOW : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NODE_ADDR : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_NAME_TABLE : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_NL_BEARER_ADD : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_DISABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_ENABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_FLUSH : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_RESET_STATS : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_PEER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NAME_TABLE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NODE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PEER_REMOVE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PUBL_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_SOCK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_UDP_GET_REMOTEIP : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$WG_CMD_GET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$WG_CMD_SET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$alg : sock_algconn [accept$alg accept4$alg] sendmsg$can_bcm : timespec [clock_gettime] sendmsg$hf : sock_hf [socket$hf] sendmsg$nfc_llcp : sock_nfc_llcp [accept$nfc_llcp accept4$nfc_llcp syz_init_net_socket$nfc_llcp] sendmsg$nl_route : ifindex_vcan [ioctl$ifreq_SIOCGIFINDEX_vcan] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 311/8048 2025/08/16 23:08:08 new: machine check complete 2025/08/16 23:08:08 new: adding 27492 seeds 2025/08/16 23:09:37 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:10:34 runner 1 connected 2025/08/16 23:11:56 STAT { "buffer too small": 0, "candidate triage jobs": 59, "candidates": 21776, "comps overflows": 0, "corpus": 5611, "corpus [files]": 894, "corpus [symbols]": 910, "cover overflows": 1156, "coverage": 74091, "distributor delayed": 6278, "distributor undelayed": 6276, "distributor violated": 1, "exec candidate": 5716, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 3, "exec seeds": 0, "exec smash": 0, "exec total [base]": 9458, "exec total [new]": 26015, "exec triage": 17712, "executor restarts": 95, "fault jobs": 0, "fuzzer jobs": 59, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 74970, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 5716, "no exec duration": 49203000000, "no exec requests": 105, "pending": 0, "prog exec time": 165, "reproducing": 0, "rpc recv": 954371804, "rpc sent": 54800680, "signal": 72369, "smash jobs": 0, "triage jobs": 0, "vm output": 963393, "vm restarts [base]": 3, "vm restarts [new]": 11 } 2025/08/16 23:12:33 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = true] 2025/08/16 23:12:33 scheduled a reproduction of 'WARNING in xfrm6_tunnel_net_exit' 2025/08/16 23:13:03 patched crashed: WARNING in xfrm_state_fini [need repro = true] 2025/08/16 23:13:03 scheduled a reproduction of 'WARNING in xfrm_state_fini' 2025/08/16 23:13:06 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/16 23:13:29 runner 0 connected 2025/08/16 23:13:31 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:13:55 patched crashed: WARNING in xfrm_state_fini [need repro = true] 2025/08/16 23:13:55 scheduled a reproduction of 'WARNING in xfrm_state_fini' 2025/08/16 23:14:00 runner 2 connected 2025/08/16 23:14:03 runner 3 connected 2025/08/16 23:14:28 runner 8 connected 2025/08/16 23:14:36 patched crashed: WARNING in xfrm_state_fini [need repro = true] 2025/08/16 23:14:36 scheduled a reproduction of 'WARNING in xfrm_state_fini' 2025/08/16 23:14:52 runner 7 connected 2025/08/16 23:15:20 patched crashed: WARNING in xfrm_state_fini [need repro = true] 2025/08/16 23:15:20 scheduled a reproduction of 'WARNING in xfrm_state_fini' 2025/08/16 23:15:21 patched crashed: WARNING in xfrm_state_fini [need repro = true] 2025/08/16 23:15:21 scheduled a reproduction of 'WARNING in xfrm_state_fini' 2025/08/16 23:15:23 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = true] 2025/08/16 23:15:23 scheduled a reproduction of 'KASAN: slab-use-after-free Read in xfrm_alloc_spi' 2025/08/16 23:15:33 runner 4 connected 2025/08/16 23:15:58 base crash: KASAN: slab-use-after-free Write in __xfrm_state_delete 2025/08/16 23:16:01 base crash: WARNING in xfrm_state_fini 2025/08/16 23:16:11 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = true] 2025/08/16 23:16:11 scheduled a reproduction of 'KASAN: slab-use-after-free Read in xfrm_alloc_spi' 2025/08/16 23:16:16 runner 6 connected 2025/08/16 23:16:19 runner 1 connected 2025/08/16 23:16:21 runner 0 connected 2025/08/16 23:16:40 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = true] 2025/08/16 23:16:40 scheduled a reproduction of 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/16 23:16:49 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:16:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:16:55 runner 3 connected 2025/08/16 23:16:56 STAT { "buffer too small": 0, "candidate triage jobs": 27, "candidates": 16164, "comps overflows": 0, "corpus": 11136, "corpus [files]": 1710, "corpus [symbols]": 1741, "cover overflows": 2368, "coverage": 85832, "distributor delayed": 12987, "distributor undelayed": 12984, "distributor violated": 3, "exec candidate": 11328, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 19, "exec seeds": 0, "exec smash": 0, "exec total [base]": 18327, "exec total [new]": 59838, "exec triage": 35097, "executor restarts": 138, "fault jobs": 0, "fuzzer jobs": 27, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 0, "max signal": 87841, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 11328, "no exec duration": 60708000000, "no exec requests": 142, "pending": 9, "prog exec time": 299, "reproducing": 0, "rpc recv": 1666879840, "rpc sent": 112623176, "signal": 83602, "smash jobs": 0, "triage jobs": 0, "vm output": 2113265, "vm restarts [base]": 5, "vm restarts [new]": 19 } 2025/08/16 23:16:58 runner 1 connected 2025/08/16 23:17:00 runner 8 connected 2025/08/16 23:17:01 base: boot error: can't ssh into the instance 2025/08/16 23:17:11 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:17:18 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:17:30 runner 3 connected 2025/08/16 23:17:45 runner 5 connected 2025/08/16 23:17:47 runner 9 connected 2025/08/16 23:17:58 runner 2 connected 2025/08/16 23:18:01 base crash: WARNING in xfrm_state_fini 2025/08/16 23:18:04 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:18:07 runner 0 connected 2025/08/16 23:18:15 runner 2 connected 2025/08/16 23:18:57 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:18:58 runner 1 connected 2025/08/16 23:19:02 runner 4 connected 2025/08/16 23:19:55 runner 1 connected 2025/08/16 23:20:59 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:21:56 STAT { "buffer too small": 0, "candidate triage jobs": 2, "candidates": 15144, "comps overflows": 0, "corpus": 12059, "corpus [files]": 1805, "corpus [symbols]": 1840, "cover overflows": 3802, "coverage": 87651, "distributor delayed": 14516, "distributor undelayed": 14516, "distributor violated": 15, "exec candidate": 12348, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 41, "exec seeds": 0, "exec smash": 0, "exec total [base]": 30102, "exec total [new]": 88909, "exec triage": 38527, "executor restarts": 195, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 9, "hints jobs": 0, "max signal": 89913, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12347, "no exec duration": 64066000000, "no exec requests": 163, "pending": 9, "prog exec time": 197, "reproducing": 0, "rpc recv": 2153549276, "rpc sent": 170610232, "signal": 85336, "smash jobs": 0, "triage jobs": 0, "vm output": 3305555, "vm restarts [base]": 8, "vm restarts [new]": 27 } 2025/08/16 23:22:56 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:22:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:23:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:23:35 patched crashed: INFO: task hung in nfsd_nl_listener_get_doit [need repro = true] 2025/08/16 23:23:35 scheduled a reproduction of 'INFO: task hung in nfsd_nl_listener_get_doit' 2025/08/16 23:23:54 runner 7 connected 2025/08/16 23:24:12 runner 8 connected 2025/08/16 23:24:30 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:24:32 runner 3 connected 2025/08/16 23:24:39 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:25:27 runner 4 connected 2025/08/16 23:25:28 runner 7 connected 2025/08/16 23:26:26 triaged 93.0% of the corpus 2025/08/16 23:26:26 starting bug reproductions 2025/08/16 23:26:26 starting bug reproductions (max 10 VMs, 7 repros) 2025/08/16 23:26:26 reproduction of "WARNING in xfrm6_tunnel_net_exit" aborted: it's no longer needed 2025/08/16 23:26:26 reproduction of "WARNING in xfrm_state_fini" aborted: it's no longer needed 2025/08/16 23:26:26 reproduction of "WARNING in xfrm_state_fini" aborted: it's no longer needed 2025/08/16 23:26:26 reproduction of "WARNING in xfrm_state_fini" aborted: it's no longer needed 2025/08/16 23:26:26 reproduction of "WARNING in xfrm_state_fini" aborted: it's no longer needed 2025/08/16 23:26:26 reproduction of "WARNING in xfrm_state_fini" aborted: it's no longer needed 2025/08/16 23:26:26 start reproducing 'INFO: task hung in nfsd_nl_listener_get_doit' 2025/08/16 23:26:26 start reproducing 'KASAN: slab-use-after-free Read in xfrm_alloc_spi' 2025/08/16 23:26:26 start reproducing 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/16 23:26:42 base crash: WARNING in xfrm_state_fini 2025/08/16 23:26:56 STAT { "buffer too small": 0, "candidate triage jobs": 5, "candidates": 537, "comps overflows": 0, "corpus": 12113, "corpus [files]": 1805, "corpus [symbols]": 1840, "cover overflows": 4990, "coverage": 87736, "distributor delayed": 14793, "distributor undelayed": 14791, "distributor violated": 24, "exec candidate": 26955, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 54, "exec seeds": 0, "exec smash": 0, "exec total [base]": 43356, "exec total [new]": 112017, "exec triage": 39075, "executor restarts": 245, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 4, "hints jobs": 0, "max signal": 90167, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12478, "no exec duration": 67972000000, "no exec requests": 184, "pending": 1, "prog exec time": 173, "reproducing": 3, "rpc recv": 2343908356, "rpc sent": 221696640, "signal": 85420, "smash jobs": 0, "triage jobs": 0, "vm output": 4294847, "vm restarts [base]": 8, "vm restarts [new]": 32 } 2025/08/16 23:27:26 triaged 100.0% of the corpus 2025/08/16 23:27:31 runner 2 connected 2025/08/16 23:27:52 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:28:15 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:28:41 runner 8 connected 2025/08/16 23:30:19 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:30:22 base crash: WARNING in xfrm_state_fini 2025/08/16 23:31:05 new: boot error: can't ssh into the instance 2025/08/16 23:31:08 runner 6 connected 2025/08/16 23:31:11 patched crashed: INFO: task hung in nfsd_nl_rpc_status_get_dumpit [need repro = true] 2025/08/16 23:31:11 scheduled a reproduction of 'INFO: task hung in nfsd_nl_rpc_status_get_dumpit' 2025/08/16 23:31:11 start reproducing 'INFO: task hung in nfsd_nl_rpc_status_get_dumpit' 2025/08/16 23:31:11 runner 3 connected 2025/08/16 23:31:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 0, "corpus": 12117, "corpus [files]": 1806, "corpus [symbols]": 1841, "cover overflows": 5306, "coverage": 87742, "distributor delayed": 14884, "distributor undelayed": 14881, "distributor violated": 43, "exec candidate": 27492, "exec collide": 1464, "exec fuzz": 2845, "exec gen": 126, "exec hints": 548, "exec inject": 0, "exec minimize": 26, "exec retries": 60, "exec seeds": 12, "exec smash": 100, "exec total [base]": 52007, "exec total [new]": 117797, "exec triage": 39199, "executor restarts": 265, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 2, "hints jobs": 3, "max signal": 90239, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 16, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12516, "no exec duration": 69659000000, "no exec requests": 196, "pending": 1, "prog exec time": 281, "reproducing": 4, "rpc recv": 2483561008, "rpc sent": 285239560, "signal": 85425, "smash jobs": 0, "triage jobs": 3, "vm output": 5062603, "vm restarts [base]": 10, "vm restarts [new]": 34 } 2025/08/16 23:32:06 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:32:07 runner 7 connected 2025/08/16 23:32:57 runner 8 connected 2025/08/16 23:33:02 new: boot error: can't ssh into the instance 2025/08/16 23:34:01 base crash: lost connection to test machine 2025/08/16 23:34:39 base crash: WARNING in xfrm_state_fini 2025/08/16 23:34:43 base crash: WARNING in xfrm_state_fini 2025/08/16 23:34:49 runner 3 connected 2025/08/16 23:35:28 runner 0 connected 2025/08/16 23:35:33 runner 2 connected 2025/08/16 23:36:31 new: boot error: can't ssh into the instance 2025/08/16 23:36:37 base crash: general protection fault in xfrm_alloc_spi 2025/08/16 23:36:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 3, "corpus": 12120, "corpus [files]": 1807, "corpus [symbols]": 1842, "cover overflows": 5585, "coverage": 87746, "distributor delayed": 14936, "distributor undelayed": 14935, "distributor violated": 50, "exec candidate": 27492, "exec collide": 2834, "exec fuzz": 5368, "exec gen": 242, "exec hints": 996, "exec inject": 0, "exec minimize": 106, "exec retries": 67, "exec seeds": 24, "exec smash": 178, "exec total [base]": 57695, "exec total [new]": 122529, "exec triage": 39303, "executor restarts": 292, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 3, "hints jobs": 3, "max signal": 90768, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 57, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12549, "no exec duration": 752207000000, "no exec requests": 2371, "pending": 1, "prog exec time": 432, "reproducing": 4, "rpc recv": 2653736708, "rpc sent": 339307296, "signal": 85429, "smash jobs": 1, "triage jobs": 2, "vm output": 5961913, "vm restarts [base]": 13, "vm restarts [new]": 36 } 2025/08/16 23:37:27 runner 1 connected 2025/08/16 23:37:44 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:38:21 new: boot error: can't ssh into the instance 2025/08/16 23:38:32 runner 8 connected 2025/08/16 23:39:06 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/16 23:39:11 runner 9 connected 2025/08/16 23:39:22 repro finished 'KASAN: slab-use-after-free Read in xfrm_alloc_spi', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/16 23:39:22 failed repro for "KASAN: slab-use-after-free Read in xfrm_alloc_spi", err=%!s() 2025/08/16 23:39:22 reproduction of "KASAN: slab-use-after-free Read in xfrm_alloc_spi" aborted: it's no longer needed 2025/08/16 23:39:22 "KASAN: slab-use-after-free Read in xfrm_alloc_spi": saved crash log into 1755387562.crash.log 2025/08/16 23:39:22 "KASAN: slab-use-after-free Read in xfrm_alloc_spi": saved repro log into 1755387562.repro.log 2025/08/16 23:39:47 patched crashed: no output from test machine [need repro = false] 2025/08/16 23:39:53 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/16 23:39:53 repro finished 'KASAN: slab-use-after-free Read in __xfrm_state_lookup', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/16 23:39:53 failed repro for "KASAN: slab-use-after-free Read in __xfrm_state_lookup", err=%!s() 2025/08/16 23:39:53 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved crash log into 1755387593.crash.log 2025/08/16 23:39:53 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved repro log into 1755387593.repro.log 2025/08/16 23:39:56 runner 2 connected 2025/08/16 23:40:02 repro finished 'INFO: task hung in nfsd_nl_listener_get_doit', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/16 23:40:02 failed repro for "INFO: task hung in nfsd_nl_listener_get_doit", err=%!s() 2025/08/16 23:40:02 "INFO: task hung in nfsd_nl_listener_get_doit": saved crash log into 1755387602.crash.log 2025/08/16 23:40:02 "INFO: task hung in nfsd_nl_listener_get_doit": saved repro log into 1755387602.repro.log 2025/08/16 23:40:05 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/16 23:40:13 runner 0 connected 2025/08/16 23:40:19 runner 1 connected 2025/08/16 23:40:22 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/08/16 23:40:36 runner 7 connected 2025/08/16 23:40:42 runner 1 connected 2025/08/16 23:40:47 runner 2 connected 2025/08/16 23:40:51 runner 3 connected 2025/08/16 23:40:56 runner 3 connected 2025/08/16 23:41:08 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/16 23:41:33 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:41:45 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:41:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 9, "corpus": 12125, "corpus [files]": 1809, "corpus [symbols]": 1844, "cover overflows": 5952, "coverage": 87761, "distributor delayed": 15002, "distributor undelayed": 15001, "distributor violated": 50, "exec candidate": 27492, "exec collide": 4830, "exec fuzz": 9233, "exec gen": 439, "exec hints": 2185, "exec inject": 0, "exec minimize": 257, "exec retries": 68, "exec seeds": 39, "exec smash": 290, "exec total [base]": 63696, "exec total [new]": 130203, "exec triage": 39446, "executor restarts": 318, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 4, "hints jobs": 5, "max signal": 90912, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 142, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12595, "no exec duration": 1408984000000, "no exec requests": 4384, "pending": 0, "prog exec time": 290, "reproducing": 1, "rpc recv": 3014561128, "rpc sent": 405218216, "signal": 85444, "smash jobs": 2, "triage jobs": 2, "vm output": 6779692, "vm restarts [base]": 17, "vm restarts [new]": 43 } 2025/08/16 23:41:57 runner 9 connected 2025/08/16 23:42:22 runner 0 connected 2025/08/16 23:42:42 runner 1 connected 2025/08/16 23:42:42 base crash: lost connection to test machine 2025/08/16 23:42:47 base crash: WARNING in xfrm_state_fini 2025/08/16 23:43:34 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/16 23:43:39 runner 3 connected 2025/08/16 23:43:44 runner 0 connected 2025/08/16 23:43:44 new: boot error: can't ssh into the instance 2025/08/16 23:43:56 patched crashed: INFO: rcu detected stall in sys_mkdir [need repro = false] 2025/08/16 23:44:32 runner 9 connected 2025/08/16 23:44:45 runner 7 connected 2025/08/16 23:45:21 base crash: KASAN: slab-use-after-free Read in __xfrm_state_insert 2025/08/16 23:45:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:45:34 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:45:35 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/16 23:45:46 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/16 23:46:18 runner 1 connected 2025/08/16 23:46:23 runner 8 connected 2025/08/16 23:46:25 runner 2 connected 2025/08/16 23:46:30 runner 3 connected 2025/08/16 23:46:36 runner 1 connected 2025/08/16 23:46:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 12, "corpus": 12134, "corpus [files]": 1809, "corpus [symbols]": 1844, "cover overflows": 6627, "coverage": 87790, "distributor delayed": 15102, "distributor undelayed": 15102, "distributor violated": 53, "exec candidate": 27492, "exec collide": 8293, "exec fuzz": 15787, "exec gen": 798, "exec hints": 3334, "exec inject": 0, "exec minimize": 573, "exec retries": 76, "exec seeds": 65, "exec smash": 537, "exec total [base]": 70413, "exec total [new]": 142478, "exec triage": 39595, "executor restarts": 357, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 7, "hints jobs": 4, "max signal": 90988, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 283, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12646, "no exec duration": 1409651000000, "no exec requests": 4393, "pending": 0, "prog exec time": 324, "reproducing": 1, "rpc recv": 3413760500, "rpc sent": 502787864, "signal": 85477, "smash jobs": 1, "triage jobs": 1, "vm output": 7600116, "vm restarts [base]": 20, "vm restarts [new]": 52 } 2025/08/16 23:47:45 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/16 23:47:53 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:48:08 base crash: lost connection to test machine 2025/08/16 23:48:29 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/16 23:48:30 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/16 23:48:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:48:50 runner 2 connected 2025/08/16 23:49:27 base crash: WARNING in xfrm_state_fini 2025/08/16 23:49:29 runner 8 connected 2025/08/16 23:49:29 runner 0 connected 2025/08/16 23:49:52 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/16 23:50:17 runner 0 connected 2025/08/16 23:50:19 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:50:28 new: boot error: can't ssh into the instance 2025/08/16 23:50:49 runner 2 connected 2025/08/16 23:51:02 base crash: WARNING in xfrm_state_fini 2025/08/16 23:51:08 runner 0 connected 2025/08/16 23:51:17 runner 6 connected 2025/08/16 23:51:51 runner 3 connected 2025/08/16 23:51:54 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/16 23:51:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 12, "corpus": 12139, "corpus [files]": 1809, "corpus [symbols]": 1844, "cover overflows": 7238, "coverage": 87804, "distributor delayed": 15188, "distributor undelayed": 15188, "distributor violated": 56, "exec candidate": 27492, "exec collide": 11612, "exec fuzz": 21983, "exec gen": 1132, "exec hints": 4583, "exec inject": 0, "exec minimize": 678, "exec retries": 78, "exec seeds": 86, "exec smash": 708, "exec total [base]": 75566, "exec total [new]": 154020, "exec triage": 39746, "executor restarts": 383, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 4, "max signal": 91221, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 341, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12694, "no exec duration": 1410625000000, "no exec requests": 4403, "pending": 0, "prog exec time": 267, "reproducing": 1, "rpc recv": 3651554096, "rpc sent": 586660984, "signal": 85490, "smash jobs": 1, "triage jobs": 0, "vm output": 8416238, "vm restarts [base]": 23, "vm restarts [new]": 57 } 2025/08/16 23:52:13 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:52:24 base crash: lost connection to test machine 2025/08/16 23:52:43 runner 0 connected 2025/08/16 23:52:50 base crash: lost connection to test machine 2025/08/16 23:53:04 runner 2 connected 2025/08/16 23:53:16 runner 2 connected 2025/08/16 23:53:21 base crash: lost connection to test machine 2025/08/16 23:53:23 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:53:40 runner 3 connected 2025/08/16 23:53:57 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:54:11 runner 0 connected 2025/08/16 23:54:12 runner 6 connected 2025/08/16 23:54:47 runner 1 connected 2025/08/16 23:55:24 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:55:52 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:56:07 base crash: lost connection to test machine 2025/08/16 23:56:14 runner 1 connected 2025/08/16 23:56:22 base crash: lost connection to test machine 2025/08/16 23:56:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 15, "corpus": 12145, "corpus [files]": 1809, "corpus [symbols]": 1844, "cover overflows": 7903, "coverage": 87812, "distributor delayed": 15272, "distributor undelayed": 15271, "distributor violated": 59, "exec candidate": 27492, "exec collide": 15234, "exec fuzz": 29000, "exec gen": 1515, "exec hints": 6017, "exec inject": 0, "exec minimize": 874, "exec retries": 83, "exec seeds": 101, "exec smash": 849, "exec total [base]": 79713, "exec total [new]": 166989, "exec triage": 39905, "executor restarts": 401, "fault jobs": 0, "fuzzer jobs": 8, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 5, "max signal": 91317, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 428, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12746, "no exec duration": 1413186000000, "no exec requests": 4424, "pending": 0, "prog exec time": 280, "reproducing": 1, "rpc recv": 3952975376, "rpc sent": 685394000, "signal": 85497, "smash jobs": 1, "triage jobs": 2, "vm output": 9238093, "vm restarts [base]": 27, "vm restarts [new]": 61 } 2025/08/16 23:56:56 runner 3 connected 2025/08/16 23:57:20 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = true] 2025/08/16 23:57:20 scheduled a reproduction of 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/16 23:57:20 start reproducing 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/16 23:57:21 patched crashed: INFO: task hung in bpf_xdp_link_attach [need repro = true] 2025/08/16 23:57:21 scheduled a reproduction of 'INFO: task hung in bpf_xdp_link_attach' 2025/08/16 23:57:21 start reproducing 'INFO: task hung in bpf_xdp_link_attach' 2025/08/16 23:57:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/16 23:57:26 fuzzer has reached the modified code (1844 + 1809 + 0), continuing fuzzing 2025/08/16 23:57:43 base crash: lost connection to test machine 2025/08/16 23:57:48 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:57:51 new: boot error: can't ssh into the instance 2025/08/16 23:58:11 runner 9 connected 2025/08/16 23:58:14 base: boot error: can't ssh into the instance 2025/08/16 23:58:15 runner 8 connected 2025/08/16 23:58:31 runner 0 connected 2025/08/16 23:58:35 new: boot error: can't ssh into the instance 2025/08/16 23:58:36 runner 2 connected 2025/08/16 23:58:40 runner 7 connected 2025/08/16 23:58:51 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:59:02 runner 1 connected 2025/08/16 23:59:03 base crash: lost connection to test machine 2025/08/16 23:59:12 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:59:19 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:59:24 runner 3 connected 2025/08/16 23:59:35 patched crashed: lost connection to test machine [need repro = false] 2025/08/16 23:59:43 runner 9 connected 2025/08/16 23:59:52 runner 0 connected 2025/08/16 23:59:59 base crash: WARNING in xfrm_state_fini 2025/08/17 00:00:02 runner 2 connected 2025/08/17 00:00:10 runner 8 connected 2025/08/17 00:00:25 runner 7 connected 2025/08/17 00:00:30 base crash: lost connection to test machine 2025/08/17 00:00:30 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:00:50 runner 3 connected 2025/08/17 00:00:51 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:01:18 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:01:19 runner 0 connected 2025/08/17 00:01:20 runner 3 connected 2025/08/17 00:01:40 runner 8 connected 2025/08/17 00:01:44 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:01:51 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:01:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 15, "corpus": 12147, "corpus [files]": 1809, "corpus [symbols]": 1844, "cover overflows": 8094, "coverage": 87814, "distributor delayed": 15305, "distributor undelayed": 15302, "distributor violated": 60, "exec candidate": 27492, "exec collide": 16396, "exec fuzz": 31143, "exec gen": 1624, "exec hints": 6880, "exec inject": 0, "exec minimize": 967, "exec retries": 86, "exec seeds": 107, "exec smash": 902, "exec total [base]": 83564, "exec total [new]": 171453, "exec triage": 39946, "executor restarts": 443, "fault jobs": 0, "fuzzer jobs": 10, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 0, "hints jobs": 6, "max signal": 91355, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 461, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12760, "no exec duration": 1413199000000, "no exec requests": 4425, "pending": 0, "prog exec time": 167, "reproducing": 3, "rpc recv": 4487168860, "rpc sent": 742446360, "signal": 85499, "smash jobs": 0, "triage jobs": 4, "vm output": 9913992, "vm restarts [base]": 33, "vm restarts [new]": 72 } 2025/08/17 00:01:56 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:01:57 base crash: WARNING in xfrm_state_fini 2025/08/17 00:02:09 runner 7 connected 2025/08/17 00:02:12 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:02:24 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 00:02:34 runner 9 connected 2025/08/17 00:02:39 runner 2 connected 2025/08/17 00:02:44 runner 3 connected 2025/08/17 00:02:46 runner 0 connected 2025/08/17 00:03:01 runner 8 connected 2025/08/17 00:03:02 base crash: lost connection to test machine 2025/08/17 00:03:13 runner 1 connected 2025/08/17 00:03:25 base crash: lost connection to test machine 2025/08/17 00:03:35 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:03:53 runner 3 connected 2025/08/17 00:03:54 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:03:54 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:04:14 runner 0 connected 2025/08/17 00:04:24 runner 2 connected 2025/08/17 00:04:26 base crash: lost connection to test machine 2025/08/17 00:04:43 runner 7 connected 2025/08/17 00:04:43 runner 9 connected 2025/08/17 00:05:07 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:05:14 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:05:17 runner 3 connected 2025/08/17 00:05:29 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:05:48 base crash: lost connection to test machine 2025/08/17 00:05:56 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:05:57 runner 2 connected 2025/08/17 00:05:57 new: boot error: can't ssh into the instance 2025/08/17 00:06:05 base crash: WARNING in xfrm_state_fini 2025/08/17 00:06:05 runner 7 connected 2025/08/17 00:06:18 base crash: lost connection to test machine 2025/08/17 00:06:19 runner 9 connected 2025/08/17 00:06:28 base: boot error: can't ssh into the instance 2025/08/17 00:06:31 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:06:44 runner 3 connected 2025/08/17 00:06:52 runner 3 connected 2025/08/17 00:06:54 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:06:54 runner 6 connected 2025/08/17 00:06:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 15, "corpus": 12149, "corpus [files]": 1809, "corpus [symbols]": 1844, "cover overflows": 8290, "coverage": 87815, "distributor delayed": 15352, "distributor undelayed": 15349, "distributor violated": 61, "exec candidate": 27492, "exec collide": 17412, "exec fuzz": 33114, "exec gen": 1725, "exec hints": 7928, "exec inject": 0, "exec minimize": 1016, "exec retries": 91, "exec seeds": 113, "exec smash": 952, "exec total [base]": 86404, "exec total [new]": 175744, "exec triage": 39990, "executor restarts": 480, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 2, "hints jobs": 5, "max signal": 91376, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 479, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12776, "no exec duration": 1413623000000, "no exec requests": 4429, "pending": 0, "prog exec time": 353, "reproducing": 3, "rpc recv": 5020815016, "rpc sent": 794472536, "signal": 85500, "smash jobs": 0, "triage jobs": 4, "vm output": 10466903, "vm restarts [base]": 39, "vm restarts [new]": 85 } 2025/08/17 00:07:02 runner 1 connected 2025/08/17 00:07:15 runner 0 connected 2025/08/17 00:07:24 runner 2 connected 2025/08/17 00:07:25 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:07:26 new: boot error: can't ssh into the instance 2025/08/17 00:07:28 runner 2 connected 2025/08/17 00:07:36 base crash: lost connection to test machine 2025/08/17 00:07:44 runner 7 connected 2025/08/17 00:08:09 base crash: lost connection to test machine 2025/08/17 00:08:15 runner 8 connected 2025/08/17 00:08:20 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:08:21 base crash: lost connection to test machine 2025/08/17 00:08:24 runner 1 connected 2025/08/17 00:08:56 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:08:57 base crash: lost connection to test machine 2025/08/17 00:08:58 runner 2 connected 2025/08/17 00:09:05 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:09:09 runner 7 connected 2025/08/17 00:09:13 runner 3 connected 2025/08/17 00:09:46 runner 2 connected 2025/08/17 00:09:46 runner 1 connected 2025/08/17 00:09:54 runner 8 connected 2025/08/17 00:10:05 base crash: lost connection to test machine 2025/08/17 00:10:11 base crash: INFO: task hung in cfg80211_wiphy_work 2025/08/17 00:10:24 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:10:26 base crash: lost connection to test machine 2025/08/17 00:10:41 repro finished 'KASAN: slab-use-after-free Read in __xfrm_state_lookup', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/17 00:10:41 failed repro for "KASAN: slab-use-after-free Read in __xfrm_state_lookup", err=%!s() 2025/08/17 00:10:41 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved crash log into 1755389441.crash.log 2025/08/17 00:10:41 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved repro log into 1755389441.repro.log 2025/08/17 00:10:44 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:11:01 runner 3 connected 2025/08/17 00:11:07 runner 0 connected 2025/08/17 00:11:11 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:11:13 runner 8 connected 2025/08/17 00:11:16 runner 1 connected 2025/08/17 00:11:30 runner 0 connected 2025/08/17 00:11:30 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:11:36 base crash: lost connection to test machine 2025/08/17 00:11:52 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:11:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 21, "corpus": 12157, "corpus [files]": 1810, "corpus [symbols]": 1845, "cover overflows": 8700, "coverage": 87826, "distributor delayed": 15433, "distributor undelayed": 15430, "distributor violated": 62, "exec candidate": 27492, "exec collide": 19507, "exec fuzz": 37153, "exec gen": 1927, "exec hints": 9300, "exec inject": 0, "exec minimize": 1304, "exec retries": 96, "exec seeds": 140, "exec smash": 1159, "exec total [base]": 89299, "exec total [new]": 184081, "exec triage": 40093, "executor restarts": 517, "fault jobs": 0, "fuzzer jobs": 14, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 1, "hints jobs": 8, "max signal": 91569, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 612, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12811, "no exec duration": 1413714000000, "no exec requests": 4434, "pending": 0, "prog exec time": 306, "reproducing": 2, "rpc recv": 5656182124, "rpc sent": 859984336, "signal": 85511, "smash jobs": 1, "triage jobs": 5, "vm output": 11345415, "vm restarts [base]": 49, "vm restarts [new]": 93 } 2025/08/17 00:11:58 repro finished 'INFO: task hung in bpf_xdp_link_attach', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/17 00:11:58 failed repro for "INFO: task hung in bpf_xdp_link_attach", err=%!s() 2025/08/17 00:11:58 "INFO: task hung in bpf_xdp_link_attach": saved crash log into 1755389518.crash.log 2025/08/17 00:11:58 "INFO: task hung in bpf_xdp_link_attach": saved repro log into 1755389518.repro.log 2025/08/17 00:12:01 runner 7 connected 2025/08/17 00:12:01 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:12:03 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:12:08 base crash: lost connection to test machine 2025/08/17 00:12:20 runner 9 connected 2025/08/17 00:12:26 runner 2 connected 2025/08/17 00:12:27 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:12:42 runner 8 connected 2025/08/17 00:12:51 runner 2 connected 2025/08/17 00:12:51 runner 0 connected 2025/08/17 00:13:05 runner 1 connected 2025/08/17 00:13:09 base crash: lost connection to test machine 2025/08/17 00:13:09 base crash: lost connection to test machine 2025/08/17 00:13:16 runner 6 connected 2025/08/17 00:13:35 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:13:52 new: boot error: can't ssh into the instance 2025/08/17 00:13:58 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 00:13:58 runner 2 connected 2025/08/17 00:13:59 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:14:06 runner 0 connected 2025/08/17 00:14:10 runner 1 connected 2025/08/17 00:14:16 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:14:33 runner 2 connected 2025/08/17 00:14:46 runner 3 connected 2025/08/17 00:14:48 runner 7 connected 2025/08/17 00:14:52 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:15:06 runner 8 connected 2025/08/17 00:15:17 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:15:41 runner 9 connected 2025/08/17 00:15:52 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:16:13 runner 1 connected 2025/08/17 00:16:15 base crash: lost connection to test machine 2025/08/17 00:16:28 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 00:16:29 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:16:42 runner 8 connected 2025/08/17 00:16:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 27, "corpus": 12163, "corpus [files]": 1810, "corpus [symbols]": 1845, "cover overflows": 9250, "coverage": 87833, "distributor delayed": 15506, "distributor undelayed": 15506, "distributor violated": 62, "exec candidate": 27492, "exec collide": 22081, "exec fuzz": 42078, "exec gen": 2175, "exec hints": 10826, "exec inject": 0, "exec minimize": 1434, "exec retries": 97, "exec seeds": 161, "exec smash": 1352, "exec total [base]": 96869, "exec total [new]": 193816, "exec triage": 40203, "executor restarts": 562, "fault jobs": 0, "fuzzer jobs": 7, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 7, "max signal": 91654, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 685, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12845, "no exec duration": 1414499000000, "no exec requests": 4438, "pending": 0, "prog exec time": 355, "reproducing": 1, "rpc recv": 6232248016, "rpc sent": 963863248, "signal": 85518, "smash jobs": 0, "triage jobs": 0, "vm output": 12129905, "vm restarts [base]": 54, "vm restarts [new]": 106 } 2025/08/17 00:16:58 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 00:17:04 runner 1 connected 2025/08/17 00:17:14 base crash: WARNING in xfrm_state_fini 2025/08/17 00:17:18 runner 2 connected 2025/08/17 00:17:18 runner 0 connected 2025/08/17 00:17:43 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:17:55 runner 2 connected 2025/08/17 00:18:11 runner 3 connected 2025/08/17 00:18:35 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:18:40 runner 7 connected 2025/08/17 00:18:52 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:19:16 base crash: lost connection to test machine 2025/08/17 00:19:30 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 00:19:31 runner 1 connected 2025/08/17 00:19:41 base crash: KASAN: slab-use-after-free Write in __xfrm_state_delete 2025/08/17 00:19:42 runner 6 connected 2025/08/17 00:20:06 runner 2 connected 2025/08/17 00:20:20 runner 8 connected 2025/08/17 00:20:50 new: boot error: can't ssh into the instance 2025/08/17 00:21:38 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:21:40 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 00:21:41 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:21:48 runner 3 connected 2025/08/17 00:21:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 30, "corpus": 12170, "corpus [files]": 1813, "corpus [symbols]": 1848, "cover overflows": 10038, "coverage": 87845, "distributor delayed": 15594, "distributor undelayed": 15594, "distributor violated": 62, "exec candidate": 27492, "exec collide": 26377, "exec fuzz": 50095, "exec gen": 2571, "exec hints": 13032, "exec inject": 0, "exec minimize": 1509, "exec retries": 101, "exec seeds": 185, "exec smash": 1528, "exec total [base]": 104484, "exec total [new]": 209141, "exec triage": 40338, "executor restarts": 597, "fault jobs": 0, "fuzzer jobs": 10, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 4, "hints jobs": 8, "max signal": 91834, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 739, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12892, "no exec duration": 1415374000000, "no exec requests": 4454, "pending": 0, "prog exec time": 363, "reproducing": 1, "rpc recv": 6567224140, "rpc sent": 1082720624, "signal": 85525, "smash jobs": 1, "triage jobs": 1, "vm output": 12964216, "vm restarts [base]": 58, "vm restarts [new]": 113 } 2025/08/17 00:22:36 runner 0 connected 2025/08/17 00:22:36 runner 2 connected 2025/08/17 00:22:38 runner 8 connected 2025/08/17 00:22:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:23:05 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/17 00:23:05 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:23:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:23:55 runner 9 connected 2025/08/17 00:23:57 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 00:24:30 runner 1 connected 2025/08/17 00:24:33 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:24:44 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 00:24:48 runner 0 connected 2025/08/17 00:25:24 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:25:29 runner 0 connected 2025/08/17 00:25:33 runner 8 connected 2025/08/17 00:25:40 base crash: general protection fault in __pcpu_freelist_pop 2025/08/17 00:26:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:26:19 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = true] 2025/08/17 00:26:19 scheduled a reproduction of 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 00:26:19 start reproducing 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 00:26:21 runner 6 connected 2025/08/17 00:26:38 runner 3 connected 2025/08/17 00:26:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 30, "corpus": 12171, "corpus [files]": 1813, "corpus [symbols]": 1848, "cover overflows": 10706, "coverage": 87850, "distributor delayed": 15639, "distributor undelayed": 15639, "distributor violated": 62, "exec candidate": 27492, "exec collide": 30249, "exec fuzz": 57263, "exec gen": 2952, "exec hints": 14875, "exec inject": 0, "exec minimize": 1523, "exec retries": 106, "exec seeds": 191, "exec smash": 1602, "exec total [base]": 108952, "exec total [new]": 222590, "exec triage": 40423, "executor restarts": 643, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 4, "hints jobs": 3, "max signal": 91877, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 746, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12919, "no exec duration": 1417155000000, "no exec requests": 4475, "pending": 0, "prog exec time": 234, "reproducing": 2, "rpc recv": 6923898512, "rpc sent": 1172467224, "signal": 85530, "smash jobs": 0, "triage jobs": 1, "vm output": 13867222, "vm restarts [base]": 60, "vm restarts [new]": 121 } 2025/08/17 00:26:58 runner 3 connected 2025/08/17 00:27:16 runner 2 connected 2025/08/17 00:27:49 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:27:58 patched crashed: general protection fault in xfrm_alloc_spi [need repro = false] 2025/08/17 00:28:29 new: boot error: can't ssh into the instance 2025/08/17 00:28:38 runner 6 connected 2025/08/17 00:28:47 runner 9 connected 2025/08/17 00:28:51 base crash: lost connection to test machine 2025/08/17 00:29:11 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:29:15 patched crashed: KFENCE: use-after-free read in xfrm_alloc_spi [need repro = true] 2025/08/17 00:29:15 scheduled a reproduction of 'KFENCE: use-after-free read in xfrm_alloc_spi' 2025/08/17 00:29:15 start reproducing 'KFENCE: use-after-free read in xfrm_alloc_spi' 2025/08/17 00:29:26 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:29:34 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:29:36 base crash: WARNING in xfrm_state_fini 2025/08/17 00:29:47 base: boot error: can't ssh into the instance 2025/08/17 00:29:50 runner 3 connected 2025/08/17 00:30:07 runner 8 connected 2025/08/17 00:30:23 runner 9 connected 2025/08/17 00:30:23 runner 2 connected 2025/08/17 00:30:32 runner 0 connected 2025/08/17 00:30:51 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 00:31:47 runner 3 connected 2025/08/17 00:31:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 30, "corpus": 12174, "corpus [files]": 1814, "corpus [symbols]": 1849, "cover overflows": 11164, "coverage": 87854, "distributor delayed": 15688, "distributor undelayed": 15688, "distributor violated": 66, "exec candidate": 27492, "exec collide": 32739, "exec fuzz": 62043, "exec gen": 3189, "exec hints": 15837, "exec inject": 0, "exec minimize": 1570, "exec retries": 115, "exec seeds": 203, "exec smash": 1693, "exec total [base]": 113284, "exec total [new]": 231289, "exec triage": 40502, "executor restarts": 682, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 3, "hints jobs": 2, "max signal": 92422, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 775, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12947, "no exec duration": 1417574000000, "no exec requests": 4483, "pending": 0, "prog exec time": 268, "reproducing": 3, "rpc recv": 7245252380, "rpc sent": 1241010336, "signal": 85534, "smash jobs": 1, "triage jobs": 1, "vm output": 14839701, "vm restarts [base]": 62, "vm restarts [new]": 129 } 2025/08/17 00:31:59 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:32:48 runner 2 connected 2025/08/17 00:33:04 new: boot error: can't ssh into the instance 2025/08/17 00:33:11 base: boot error: can't ssh into the instance 2025/08/17 00:33:55 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:34:01 runner 7 connected 2025/08/17 00:34:07 runner 2 connected 2025/08/17 00:34:45 runner 8 connected 2025/08/17 00:35:11 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 00:35:30 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 00:35:50 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = true] 2025/08/17 00:35:50 scheduled a reproduction of 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 00:36:08 runner 6 connected 2025/08/17 00:36:14 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:36:18 patched crashed: INFO: rcu detected stall in __tun_chr_ioctl [need repro = false] 2025/08/17 00:36:27 runner 2 connected 2025/08/17 00:36:28 base crash: lost connection to test machine 2025/08/17 00:36:30 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 00:36:42 runner 3 connected 2025/08/17 00:36:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 36, "corpus": 12181, "corpus [files]": 1814, "corpus [symbols]": 1849, "cover overflows": 11700, "coverage": 87866, "distributor delayed": 15751, "distributor undelayed": 15750, "distributor violated": 66, "exec candidate": 27492, "exec collide": 35082, "exec fuzz": 66505, "exec gen": 3420, "exec hints": 16389, "exec inject": 0, "exec minimize": 1761, "exec retries": 120, "exec seeds": 227, "exec smash": 1880, "exec total [base]": 117442, "exec total [new]": 239369, "exec triage": 40598, "executor restarts": 713, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 4, "hints jobs": 2, "max signal": 92909, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 886, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 12980, "no exec duration": 1418108000000, "no exec requests": 4487, "pending": 1, "prog exec time": 1903, "reproducing": 3, "rpc recv": 7478185112, "rpc sent": 1306935168, "signal": 85540, "smash jobs": 1, "triage jobs": 2, "vm output": 16169065, "vm restarts [base]": 64, "vm restarts [new]": 134 } 2025/08/17 00:37:03 runner 9 connected 2025/08/17 00:37:06 runner 7 connected 2025/08/17 00:37:15 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:37:18 runner 3 connected 2025/08/17 00:37:27 runner 0 connected 2025/08/17 00:38:04 runner 8 connected 2025/08/17 00:38:19 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:38:20 base crash: lost connection to test machine 2025/08/17 00:38:58 repro finished 'KASAN: slab-use-after-free Read in __xfrm_state_lookup', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/17 00:38:58 failed repro for "KASAN: slab-use-after-free Read in __xfrm_state_lookup", err=%!s() 2025/08/17 00:38:58 start reproducing 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 00:38:58 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved crash log into 1755391138.crash.log 2025/08/17 00:38:58 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved repro log into 1755391138.repro.log 2025/08/17 00:39:07 runner 9 connected 2025/08/17 00:39:43 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 00:39:53 base: boot error: can't ssh into the instance 2025/08/17 00:40:40 runner 3 connected 2025/08/17 00:40:50 runner 1 connected 2025/08/17 00:41:15 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/17 00:41:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 39, "corpus": 12185, "corpus [files]": 1814, "corpus [symbols]": 1849, "cover overflows": 12275, "coverage": 87870, "distributor delayed": 15782, "distributor undelayed": 15782, "distributor violated": 66, "exec candidate": 27492, "exec collide": 38222, "exec fuzz": 72418, "exec gen": 3741, "exec hints": 17035, "exec inject": 0, "exec minimize": 1827, "exec retries": 130, "exec seeds": 239, "exec smash": 2002, "exec total [base]": 122057, "exec total [new]": 249661, "exec triage": 40655, "executor restarts": 751, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 4, "hints jobs": 3, "max signal": 92971, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 913, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13000, "no exec duration": 1418592000000, "no exec requests": 4499, "pending": 0, "prog exec time": 408, "reproducing": 3, "rpc recv": 7739229304, "rpc sent": 1385844696, "signal": 85544, "smash jobs": 0, "triage jobs": 2, "vm output": 17154881, "vm restarts [base]": 67, "vm restarts [new]": 139 } 2025/08/17 00:42:05 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:42:07 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:42:11 runner 0 connected 2025/08/17 00:42:56 runner 8 connected 2025/08/17 00:43:02 runner 7 connected 2025/08/17 00:43:04 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:44:01 runner 3 connected 2025/08/17 00:44:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:44:24 base crash: WARNING in xfrm_state_fini 2025/08/17 00:44:26 base crash: lost connection to test machine 2025/08/17 00:44:41 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 00:44:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:45:03 runner 2 connected 2025/08/17 00:45:14 runner 3 connected 2025/08/17 00:45:23 runner 1 connected 2025/08/17 00:45:31 runner 0 connected 2025/08/17 00:45:39 runner 9 connected 2025/08/17 00:46:41 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:46:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 12189, "corpus [files]": 1814, "corpus [symbols]": 1849, "cover overflows": 12713, "coverage": 87874, "distributor delayed": 15814, "distributor undelayed": 15812, "distributor violated": 66, "exec candidate": 27492, "exec collide": 40696, "exec fuzz": 77219, "exec gen": 3983, "exec hints": 17974, "exec inject": 0, "exec minimize": 1880, "exec retries": 141, "exec seeds": 251, "exec smash": 2078, "exec total [base]": 125009, "exec total [new]": 258303, "exec triage": 40704, "executor restarts": 795, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 3, "max signal": 92990, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 935, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13015, "no exec duration": 1418685000000, "no exec requests": 4502, "pending": 0, "prog exec time": 330, "reproducing": 3, "rpc recv": 8029361064, "rpc sent": 1445920128, "signal": 85549, "smash jobs": 1, "triage jobs": 2, "vm output": 18050308, "vm restarts [base]": 71, "vm restarts [new]": 144 } 2025/08/17 00:47:20 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:47:30 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 00:47:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:48:10 runner 8 connected 2025/08/17 00:48:19 runner 6 connected 2025/08/17 00:48:22 base crash: WARNING in xfrm_state_fini 2025/08/17 00:48:26 base: boot error: can't ssh into the instance 2025/08/17 00:48:54 runner 9 connected 2025/08/17 00:49:11 runner 0 connected 2025/08/17 00:49:23 runner 2 connected 2025/08/17 00:49:29 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:49:41 base crash: INFO: rcu detected stall in sys_bpf 2025/08/17 00:50:26 runner 2 connected 2025/08/17 00:50:26 new: boot error: can't ssh into the instance 2025/08/17 00:50:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:50:37 runner 3 connected 2025/08/17 00:50:42 base crash: no output from test machine 2025/08/17 00:51:35 runner 3 connected 2025/08/17 00:51:39 runner 1 connected 2025/08/17 00:51:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 12190, "corpus [files]": 1814, "corpus [symbols]": 1849, "cover overflows": 13182, "coverage": 87875, "distributor delayed": 15848, "distributor undelayed": 15848, "distributor violated": 68, "exec candidate": 27492, "exec collide": 43088, "exec fuzz": 81788, "exec gen": 4208, "exec hints": 18712, "exec inject": 0, "exec minimize": 1918, "exec retries": 145, "exec seeds": 254, "exec smash": 2107, "exec total [base]": 128776, "exec total [new]": 266352, "exec triage": 40753, "executor restarts": 833, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 5, "hints jobs": 2, "max signal": 93021, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 955, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13032, "no exec duration": 1419815000000, "no exec requests": 4514, "pending": 0, "prog exec time": 417, "reproducing": 3, "rpc recv": 8317235012, "rpc sent": 1506195704, "signal": 85550, "smash jobs": 0, "triage jobs": 2, "vm output": 18952031, "vm restarts [base]": 75, "vm restarts [new]": 149 } 2025/08/17 00:52:56 base crash: WARNING in xfrm_state_fini 2025/08/17 00:53:16 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 00:53:40 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/08/17 00:53:48 runner 0 connected 2025/08/17 00:53:55 repro finished 'KFENCE: use-after-free read in xfrm_alloc_spi', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/17 00:53:55 failed repro for "KFENCE: use-after-free read in xfrm_alloc_spi", err=%!s() 2025/08/17 00:53:55 "KFENCE: use-after-free read in xfrm_alloc_spi": saved crash log into 1755392035.crash.log 2025/08/17 00:53:55 "KFENCE: use-after-free read in xfrm_alloc_spi": saved repro log into 1755392035.repro.log 2025/08/17 00:54:05 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:54:07 runner 2 connected 2025/08/17 00:54:33 base crash: WARNING in xfrm_state_fini 2025/08/17 00:54:55 runner 3 connected 2025/08/17 00:55:22 runner 1 connected 2025/08/17 00:56:39 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:56:47 new: boot error: can't ssh into the instance 2025/08/17 00:56:49 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 00:56:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 12192, "corpus [files]": 1815, "corpus [symbols]": 1850, "cover overflows": 13667, "coverage": 87880, "distributor delayed": 15914, "distributor undelayed": 15909, "distributor violated": 71, "exec candidate": 27492, "exec collide": 45963, "exec fuzz": 87283, "exec gen": 4509, "exec hints": 19358, "exec inject": 0, "exec minimize": 1948, "exec retries": 148, "exec seeds": 260, "exec smash": 2153, "exec total [base]": 134972, "exec total [new]": 275847, "exec triage": 40854, "executor restarts": 851, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 1, "hints jobs": 2, "max signal": 93166, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 970, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13068, "no exec duration": 1420295000000, "no exec requests": 4525, "pending": 0, "prog exec time": 306, "reproducing": 2, "rpc recv": 8456586744, "rpc sent": 1585879680, "signal": 85555, "smash jobs": 0, "triage jobs": 7, "vm output": 19832147, "vm restarts [base]": 78, "vm restarts [new]": 150 } 2025/08/17 00:56:59 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:57:26 runner 0 connected 2025/08/17 00:57:30 runner 8 connected 2025/08/17 00:57:36 runner 7 connected 2025/08/17 00:57:37 base crash: WARNING in xfrm_state_fini 2025/08/17 00:57:40 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 00:57:47 runner 9 connected 2025/08/17 00:57:49 runner 3 connected 2025/08/17 00:58:27 runner 3 connected 2025/08/17 00:58:34 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/08/17 00:58:37 runner 2 connected 2025/08/17 00:58:43 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 00:59:24 runner 3 connected 2025/08/17 00:59:35 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 00:59:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 00:59:40 runner 2 connected 2025/08/17 01:00:07 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/17 01:00:32 runner 8 connected 2025/08/17 01:00:32 runner 9 connected 2025/08/17 01:00:33 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:00:35 base crash: general protection fault in __pcpu_freelist_pop 2025/08/17 01:01:10 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 01:01:29 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:01:29 runner 0 connected 2025/08/17 01:01:32 runner 1 connected 2025/08/17 01:01:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 12192, "corpus [files]": 1815, "corpus [symbols]": 1850, "cover overflows": 14114, "coverage": 87880, "distributor delayed": 15968, "distributor undelayed": 15968, "distributor violated": 71, "exec candidate": 27492, "exec collide": 48637, "exec fuzz": 92362, "exec gen": 4754, "exec hints": 19874, "exec inject": 0, "exec minimize": 1948, "exec retries": 148, "exec seeds": 260, "exec smash": 2153, "exec total [base]": 138954, "exec total [new]": 284448, "exec triage": 40932, "executor restarts": 890, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 1, "max signal": 93204, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 970, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13089, "no exec duration": 1421011000000, "no exec requests": 4531, "pending": 0, "prog exec time": 328, "reproducing": 2, "rpc recv": 8870454760, "rpc sent": 1656670160, "signal": 85555, "smash jobs": 0, "triage jobs": 1, "vm output": 20772925, "vm restarts [base]": 81, "vm restarts [new]": 160 } 2025/08/17 01:02:00 runner 2 connected 2025/08/17 01:02:19 runner 3 connected 2025/08/17 01:02:29 base crash: WARNING in xfrm_state_fini 2025/08/17 01:02:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:03:16 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 01:03:19 runner 0 connected 2025/08/17 01:03:29 runner 0 connected 2025/08/17 01:03:46 new: boot error: can't ssh into the instance 2025/08/17 01:04:06 runner 7 connected 2025/08/17 01:04:34 runner 6 connected 2025/08/17 01:05:08 base crash: INFO: rcu detected stall in futex 2025/08/17 01:05:22 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 01:05:23 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:05:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:05:56 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:06:19 runner 7 connected 2025/08/17 01:06:19 runner 2 connected 2025/08/17 01:06:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:06:27 runner 9 connected 2025/08/17 01:06:44 runner 3 connected 2025/08/17 01:06:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 12200, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 14802, "coverage": 87889, "distributor delayed": 16039, "distributor undelayed": 16039, "distributor violated": 72, "exec candidate": 27492, "exec collide": 52089, "exec fuzz": 98916, "exec gen": 5099, "exec hints": 20902, "exec inject": 0, "exec minimize": 2092, "exec retries": 151, "exec seeds": 282, "exec smash": 2315, "exec total [base]": 142354, "exec total [new]": 296261, "exec triage": 41034, "executor restarts": 919, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 5, "max signal": 93258, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1078, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13124, "no exec duration": 1421457000000, "no exec requests": 4538, "pending": 0, "prog exec time": 369, "reproducing": 2, "rpc recv": 9197294692, "rpc sent": 1739131432, "signal": 85564, "smash jobs": 3, "triage jobs": 1, "vm output": 21901804, "vm restarts [base]": 83, "vm restarts [new]": 168 } 2025/08/17 01:07:14 reproducing crash 'KASAN: slab-use-after-free Read in __xfrm_state_lookup': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f net/xfrm/xfrm_state.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/08/17 01:07:18 runner 8 connected 2025/08/17 01:08:41 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:09:00 patched crashed: INFO: rcu detected stall in sys_sendmsg [need repro = false] 2025/08/17 01:09:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:09:26 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:09:38 runner 0 connected 2025/08/17 01:09:49 base crash: lost connection to test machine 2025/08/17 01:10:04 runner 3 connected 2025/08/17 01:10:13 base: boot error: can't ssh into the instance 2025/08/17 01:10:15 runner 9 connected 2025/08/17 01:10:38 runner 0 connected 2025/08/17 01:11:04 runner 3 connected 2025/08/17 01:11:04 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:11:16 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:11:18 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:11:24 base crash: WARNING in xfrm_state_fini 2025/08/17 01:11:53 runner 6 connected 2025/08/17 01:11:54 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:11:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 12203, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 15388, "coverage": 87902, "distributor delayed": 16075, "distributor undelayed": 16073, "distributor violated": 75, "exec candidate": 27492, "exec collide": 55501, "exec fuzz": 105279, "exec gen": 5409, "exec hints": 22037, "exec inject": 0, "exec minimize": 2144, "exec retries": 156, "exec seeds": 293, "exec smash": 2428, "exec total [base]": 146601, "exec total [new]": 307709, "exec triage": 41097, "executor restarts": 940, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 2, "hints jobs": 3, "max signal": 93297, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1102, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13146, "no exec duration": 1422119000000, "no exec requests": 4546, "pending": 0, "prog exec time": 636, "reproducing": 2, "rpc recv": 9396052768, "rpc sent": 1816165432, "signal": 85567, "smash jobs": 0, "triage jobs": 2, "vm output": 22810911, "vm restarts [base]": 85, "vm restarts [new]": 173 } 2025/08/17 01:12:07 runner 8 connected 2025/08/17 01:12:13 runner 1 connected 2025/08/17 01:12:43 runner 2 connected 2025/08/17 01:12:56 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:13:46 runner 6 connected 2025/08/17 01:14:56 base crash: lost connection to test machine 2025/08/17 01:15:00 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 01:15:14 base: boot error: can't ssh into the instance 2025/08/17 01:15:46 runner 3 connected 2025/08/17 01:15:50 runner 8 connected 2025/08/17 01:15:56 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:16:04 runner 2 connected 2025/08/17 01:16:44 base crash: WARNING in xfrm_state_fini 2025/08/17 01:16:53 runner 9 connected 2025/08/17 01:16:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 12204, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 15662, "coverage": 87903, "distributor delayed": 16085, "distributor undelayed": 16085, "distributor violated": 75, "exec candidate": 27492, "exec collide": 57021, "exec fuzz": 108240, "exec gen": 5563, "exec hints": 22416, "exec inject": 0, "exec minimize": 2161, "exec retries": 168, "exec seeds": 296, "exec smash": 2453, "exec total [base]": 152783, "exec total [new]": 312792, "exec triage": 41111, "executor restarts": 978, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 4, "hints jobs": 2, "max signal": 93303, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1112, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13151, "no exec duration": 1422128000000, "no exec requests": 4547, "pending": 0, "prog exec time": 315, "reproducing": 2, "rpc recv": 9649652700, "rpc sent": 1874772696, "signal": 85568, "smash jobs": 0, "triage jobs": 2, "vm output": 23857997, "vm restarts [base]": 88, "vm restarts [new]": 178 } 2025/08/17 01:17:02 base crash: lost connection to test machine 2025/08/17 01:17:43 runner 3 connected 2025/08/17 01:17:51 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:17:59 runner 1 connected 2025/08/17 01:18:12 patched crashed: no output from test machine [need repro = false] 2025/08/17 01:18:19 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:18:48 runner 3 connected 2025/08/17 01:19:06 new: boot error: can't ssh into the instance 2025/08/17 01:19:09 runner 2 connected 2025/08/17 01:19:15 runner 6 connected 2025/08/17 01:19:55 runner 7 connected 2025/08/17 01:20:29 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:20:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:21:07 base crash: WARNING in xfrm_state_fini 2025/08/17 01:21:18 runner 9 connected 2025/08/17 01:21:22 new: boot error: can't ssh into the instance 2025/08/17 01:21:38 runner 8 connected 2025/08/17 01:21:50 base crash: KASAN: slab-use-after-free Write in __xfrm_state_delete 2025/08/17 01:21:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 12207, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 16196, "coverage": 87906, "distributor delayed": 16120, "distributor undelayed": 16120, "distributor violated": 77, "exec candidate": 27492, "exec collide": 59943, "exec fuzz": 113836, "exec gen": 5870, "exec hints": 23164, "exec inject": 0, "exec minimize": 2211, "exec retries": 173, "exec seeds": 305, "exec smash": 2528, "exec total [base]": 159110, "exec total [new]": 322553, "exec triage": 41159, "executor restarts": 1010, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 2, "max signal": 93333, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1146, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13168, "no exec duration": 1423461000000, "no exec requests": 4560, "pending": 0, "prog exec time": 336, "reproducing": 2, "rpc recv": 9940205016, "rpc sent": 1960752832, "signal": 85571, "smash jobs": 0, "triage jobs": 1, "vm output": 25172378, "vm restarts [base]": 90, "vm restarts [new]": 184 } 2025/08/17 01:21:57 runner 2 connected 2025/08/17 01:22:11 runner 0 connected 2025/08/17 01:22:39 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:22:46 runner 1 connected 2025/08/17 01:22:47 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:22:53 base crash: WARNING in xfrm_state_fini 2025/08/17 01:22:54 repro finished 'KASAN: slab-use-after-free Read in __xfrm_state_lookup', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/17 01:22:54 failed repro for "KASAN: slab-use-after-free Read in __xfrm_state_lookup", err=%!s() 2025/08/17 01:22:54 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved crash log into 1755393774.crash.log 2025/08/17 01:22:54 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved repro log into 1755393774.repro.log 2025/08/17 01:23:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:23:36 runner 2 connected 2025/08/17 01:23:44 runner 7 connected 2025/08/17 01:23:49 runner 0 connected 2025/08/17 01:23:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:24:20 runner 0 connected 2025/08/17 01:24:48 runner 6 connected 2025/08/17 01:25:05 base crash: INFO: task hung in tun_chr_close 2025/08/17 01:25:14 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = true] 2025/08/17 01:25:14 scheduled a reproduction of 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 01:25:14 start reproducing 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 01:25:29 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = true] 2025/08/17 01:25:29 scheduled a reproduction of 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 01:25:49 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:25:56 runner 3 connected 2025/08/17 01:25:58 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:26:03 runner 2 connected 2025/08/17 01:26:19 runner 7 connected 2025/08/17 01:26:20 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = true] 2025/08/17 01:26:20 scheduled a reproduction of 'KASAN: slab-use-after-free Read in __xfrm_state_lookup' 2025/08/17 01:26:39 runner 3 connected 2025/08/17 01:26:48 runner 8 connected 2025/08/17 01:26:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 12210, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 16899, "coverage": 87908, "distributor delayed": 16174, "distributor undelayed": 16174, "distributor violated": 78, "exec candidate": 27492, "exec collide": 63979, "exec fuzz": 121365, "exec gen": 6261, "exec hints": 24327, "exec inject": 0, "exec minimize": 2252, "exec retries": 176, "exec seeds": 314, "exec smash": 2603, "exec total [base]": 165889, "exec total [new]": 335900, "exec triage": 41259, "executor restarts": 1039, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 4, "hints jobs": 3, "max signal": 93385, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1168, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13199, "no exec duration": 1424408000000, "no exec requests": 4571, "pending": 2, "prog exec time": 315, "reproducing": 2, "rpc recv": 10360614852, "rpc sent": 2067980752, "signal": 85573, "smash jobs": 0, "triage jobs": 0, "vm output": 26078527, "vm restarts [base]": 94, "vm restarts [new]": 193 } 2025/08/17 01:27:09 runner 9 connected 2025/08/17 01:27:18 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:27:29 base crash: WARNING in xfrm_state_fini 2025/08/17 01:27:47 runner 1 connected 2025/08/17 01:27:47 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:27:53 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/08/17 01:28:07 runner 3 connected 2025/08/17 01:28:17 runner 1 connected 2025/08/17 01:28:18 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:28:28 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 01:28:43 runner 2 connected 2025/08/17 01:28:44 runner 6 connected 2025/08/17 01:28:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:29:03 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:29:04 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:29:08 runner 1 connected 2025/08/17 01:29:13 base crash: lost connection to test machine 2025/08/17 01:29:18 runner 2 connected 2025/08/17 01:29:52 runner 9 connected 2025/08/17 01:29:53 runner 7 connected 2025/08/17 01:29:55 runner 8 connected 2025/08/17 01:30:02 runner 0 connected 2025/08/17 01:30:07 base crash: lost connection to test machine 2025/08/17 01:30:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:31:04 runner 2 connected 2025/08/17 01:31:25 runner 2 connected 2025/08/17 01:31:50 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 01:31:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 48, "corpus": 12214, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 17623, "coverage": 87917, "distributor delayed": 16204, "distributor undelayed": 16204, "distributor violated": 78, "exec candidate": 27492, "exec collide": 67849, "exec fuzz": 128563, "exec gen": 6596, "exec hints": 25409, "exec inject": 0, "exec minimize": 2372, "exec retries": 182, "exec seeds": 325, "exec smash": 2703, "exec total [base]": 172875, "exec total [new]": 348675, "exec triage": 41310, "executor restarts": 1083, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 3, "max signal": 93412, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1225, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13216, "no exec duration": 1426201000000, "no exec requests": 4595, "pending": 2, "prog exec time": 327, "reproducing": 2, "rpc recv": 10808697692, "rpc sent": 2172992376, "signal": 85577, "smash jobs": 0, "triage jobs": 0, "vm output": 27063400, "vm restarts [base]": 98, "vm restarts [new]": 203 } 2025/08/17 01:32:08 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/08/17 01:32:17 repro finished 'INFO: task hung in nfsd_nl_rpc_status_get_dumpit', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/17 01:32:17 failed repro for "INFO: task hung in nfsd_nl_rpc_status_get_dumpit", err=%!s() 2025/08/17 01:32:17 "INFO: task hung in nfsd_nl_rpc_status_get_dumpit": saved crash log into 1755394337.crash.log 2025/08/17 01:32:17 "INFO: task hung in nfsd_nl_rpc_status_get_dumpit": saved repro log into 1755394337.repro.log 2025/08/17 01:32:28 base crash: WARNING in xfrm_state_fini 2025/08/17 01:32:40 runner 0 connected 2025/08/17 01:32:52 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/17 01:33:05 runner 1 connected 2025/08/17 01:33:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:33:15 runner 0 connected 2025/08/17 01:33:20 runner 2 connected 2025/08/17 01:33:42 runner 3 connected 2025/08/17 01:34:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:34:05 runner 7 connected 2025/08/17 01:34:07 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:34:48 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:34:56 runner 8 connected 2025/08/17 01:34:58 runner 6 connected 2025/08/17 01:34:58 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 01:35:03 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:35:03 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 01:35:38 runner 9 connected 2025/08/17 01:35:48 runner 3 connected 2025/08/17 01:35:51 runner 0 connected 2025/08/17 01:35:52 runner 2 connected 2025/08/17 01:35:54 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:36:02 repro finished 'KASAN: slab-use-after-free Read in __xfrm_state_lookup', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/08/17 01:36:02 reproduction of "KASAN: slab-use-after-free Read in __xfrm_state_lookup" aborted: it's no longer needed 2025/08/17 01:36:02 reproduction of "KASAN: slab-use-after-free Read in __xfrm_state_lookup" aborted: it's no longer needed 2025/08/17 01:36:02 failed repro for "KASAN: slab-use-after-free Read in __xfrm_state_lookup", err=%!s() 2025/08/17 01:36:02 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved crash log into 1755394562.crash.log 2025/08/17 01:36:02 "KASAN: slab-use-after-free Read in __xfrm_state_lookup": saved repro log into 1755394562.repro.log 2025/08/17 01:36:05 runner 5 connected 2025/08/17 01:36:44 base crash: WARNING in xfrm_state_fini 2025/08/17 01:36:47 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 01:36:51 runner 3 connected 2025/08/17 01:36:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 51, "corpus": 12218, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 18555, "coverage": 87922, "distributor delayed": 16237, "distributor undelayed": 16237, "distributor violated": 78, "exec candidate": 27492, "exec collide": 72706, "exec fuzz": 137375, "exec gen": 7081, "exec hints": 26646, "exec inject": 0, "exec minimize": 2474, "exec retries": 188, "exec seeds": 337, "exec smash": 2803, "exec total [base]": 178320, "exec total [new]": 364343, "exec triage": 41366, "executor restarts": 1120, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 4, "max signal": 93456, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1273, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13235, "no exec duration": 1427760000000, "no exec requests": 4607, "pending": 0, "prog exec time": 321, "reproducing": 0, "rpc recv": 11226550644, "rpc sent": 2283243712, "signal": 85582, "smash jobs": 0, "triage jobs": 0, "vm output": 27990210, "vm restarts [base]": 103, "vm restarts [new]": 212 } 2025/08/17 01:36:59 runner 4 connected 2025/08/17 01:37:27 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/08/17 01:37:41 runner 1 connected 2025/08/17 01:37:44 runner 2 connected 2025/08/17 01:38:07 base crash: lost connection to test machine 2025/08/17 01:38:16 runner 0 connected 2025/08/17 01:38:21 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:38:38 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/08/17 01:38:41 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:38:42 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 01:38:52 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 01:39:01 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:39:04 runner 3 connected 2025/08/17 01:39:18 runner 5 connected 2025/08/17 01:39:36 runner 1 connected 2025/08/17 01:39:38 runner 3 connected 2025/08/17 01:39:39 runner 0 connected 2025/08/17 01:39:51 runner 1 connected 2025/08/17 01:39:57 runner 8 connected 2025/08/17 01:39:58 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:40:55 runner 7 connected 2025/08/17 01:41:40 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 01:41:41 base crash: general protection fault in __pcpu_freelist_pop 2025/08/17 01:41:52 base crash: KASAN: slab-out-of-bounds Write in __bpf_get_stackid 2025/08/17 01:41:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 51, "corpus": 12224, "corpus [files]": 1819, "corpus [symbols]": 1854, "cover overflows": 19515, "coverage": 87928, "distributor delayed": 16287, "distributor undelayed": 16287, "distributor violated": 78, "exec candidate": 27492, "exec collide": 78553, "exec fuzz": 148197, "exec gen": 7699, "exec hints": 27757, "exec inject": 0, "exec minimize": 2531, "exec retries": 196, "exec seeds": 355, "exec smash": 2953, "exec total [base]": 184792, "exec total [new]": 383097, "exec triage": 41482, "executor restarts": 1178, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 8, "hints jobs": 3, "max signal": 93525, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1298, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13274, "no exec duration": 1428478000000, "no exec requests": 4623, "pending": 0, "prog exec time": 361, "reproducing": 0, "rpc recv": 11651408652, "rpc sent": 2417142160, "signal": 85587, "smash jobs": 0, "triage jobs": 0, "vm output": 29055423, "vm restarts [base]": 106, "vm restarts [new]": 221 } 2025/08/17 01:42:05 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:42:15 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:42:23 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:42:28 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:42:36 runner 1 connected 2025/08/17 01:42:40 runner 0 connected 2025/08/17 01:42:40 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:42:48 runner 2 connected 2025/08/17 01:43:02 runner 6 connected 2025/08/17 01:43:06 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:43:12 runner 8 connected 2025/08/17 01:43:15 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 01:43:19 runner 2 connected 2025/08/17 01:43:20 runner 4 connected 2025/08/17 01:43:31 runner 3 connected 2025/08/17 01:43:50 base crash: lost connection to test machine 2025/08/17 01:43:55 runner 5 connected 2025/08/17 01:44:13 runner 1 connected 2025/08/17 01:44:47 runner 1 connected 2025/08/17 01:45:14 base crash: WARNING in xfrm_state_fini 2025/08/17 01:46:03 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 01:46:12 runner 3 connected 2025/08/17 01:46:17 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:46:33 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 01:46:50 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:46:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 51, "corpus": 12227, "corpus [files]": 1820, "corpus [symbols]": 1855, "cover overflows": 20459, "coverage": 87931, "distributor delayed": 16327, "distributor undelayed": 16327, "distributor violated": 78, "exec candidate": 27492, "exec collide": 84036, "exec fuzz": 158432, "exec gen": 8233, "exec hints": 29230, "exec inject": 0, "exec minimize": 2602, "exec retries": 198, "exec seeds": 364, "exec smash": 3028, "exec total [base]": 189317, "exec total [new]": 401036, "exec triage": 41552, "executor restarts": 1219, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 5, "hints jobs": 4, "max signal": 93557, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1347, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13298, "no exec duration": 1430154000000, "no exec requests": 4647, "pending": 0, "prog exec time": 200, "reproducing": 0, "rpc recv": 12038946860, "rpc sent": 2531952704, "signal": 85590, "smash jobs": 0, "triage jobs": 1, "vm output": 29968700, "vm restarts [base]": 111, "vm restarts [new]": 228 } 2025/08/17 01:47:00 runner 7 connected 2025/08/17 01:47:05 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:47:14 runner 8 connected 2025/08/17 01:47:30 runner 2 connected 2025/08/17 01:47:40 runner 4 connected 2025/08/17 01:47:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:48:02 runner 9 connected 2025/08/17 01:48:08 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/17 01:48:11 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:48:22 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 01:48:44 base crash: WARNING in xfrm_state_fini 2025/08/17 01:48:48 runner 6 connected 2025/08/17 01:49:01 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:49:08 runner 0 connected 2025/08/17 01:49:19 runner 3 connected 2025/08/17 01:49:33 runner 0 connected 2025/08/17 01:49:34 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:49:57 base crash: WARNING in xfrm_state_fini 2025/08/17 01:49:58 runner 5 connected 2025/08/17 01:50:31 runner 7 connected 2025/08/17 01:50:54 runner 1 connected 2025/08/17 01:51:08 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:51:17 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:51:29 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:51:39 base crash: lost connection to test machine 2025/08/17 01:51:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:51:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 51, "corpus": 12229, "corpus [files]": 1820, "corpus [symbols]": 1855, "cover overflows": 21205, "coverage": 87933, "distributor delayed": 16368, "distributor undelayed": 16368, "distributor violated": 78, "exec candidate": 27492, "exec collide": 88346, "exec fuzz": 166644, "exec gen": 8690, "exec hints": 30193, "exec inject": 0, "exec minimize": 2654, "exec retries": 211, "exec seeds": 370, "exec smash": 3076, "exec total [base]": 192481, "exec total [new]": 415160, "exec triage": 41627, "executor restarts": 1286, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 5, "max signal": 93642, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1376, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13323, "no exec duration": 1433339000000, "no exec requests": 4663, "pending": 0, "prog exec time": 339, "reproducing": 0, "rpc recv": 12426147676, "rpc sent": 2625879624, "signal": 85592, "smash jobs": 1, "triage jobs": 0, "vm output": 31004830, "vm restarts [base]": 113, "vm restarts [new]": 238 } 2025/08/17 01:52:07 runner 1 connected 2025/08/17 01:52:13 runner 2 connected 2025/08/17 01:52:19 runner 0 connected 2025/08/17 01:52:28 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/08/17 01:52:30 runner 0 connected 2025/08/17 01:52:38 runner 7 connected 2025/08/17 01:53:00 patched crashed: INFO: task hung in tun_chr_close [need repro = false] 2025/08/17 01:53:25 runner 3 connected 2025/08/17 01:53:29 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:53:52 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:53:58 runner 4 connected 2025/08/17 01:54:24 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:54:28 runner 9 connected 2025/08/17 01:54:49 runner 2 connected 2025/08/17 01:55:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:55:21 runner 7 connected 2025/08/17 01:55:28 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:55:29 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:56:09 runner 1 connected 2025/08/17 01:56:11 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 01:56:18 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/17 01:56:29 base crash: WARNING in xfrm_state_fini 2025/08/17 01:56:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 51, "corpus": 12231, "corpus [files]": 1820, "corpus [symbols]": 1855, "cover overflows": 21960, "coverage": 87935, "distributor delayed": 16395, "distributor undelayed": 16395, "distributor violated": 78, "exec candidate": 27492, "exec collide": 93131, "exec fuzz": 175559, "exec gen": 9152, "exec hints": 31576, "exec inject": 0, "exec minimize": 2678, "exec retries": 214, "exec seeds": 375, "exec smash": 3107, "exec total [base]": 196930, "exec total [new]": 430825, "exec triage": 41686, "executor restarts": 1346, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 7, "hints jobs": 5, "max signal": 93676, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1388, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13343, "no exec duration": 1434789000000, "no exec requests": 4679, "pending": 0, "prog exec time": 351, "reproducing": 0, "rpc recv": 12781032312, "rpc sent": 2732214376, "signal": 85594, "smash jobs": 1, "triage jobs": 0, "vm output": 32019170, "vm restarts [base]": 115, "vm restarts [new]": 247 } 2025/08/17 01:57:08 runner 0 connected 2025/08/17 01:57:16 runner 0 connected 2025/08/17 01:57:27 runner 1 connected 2025/08/17 01:57:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:57:46 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:58:14 base: boot error: can't ssh into the instance 2025/08/17 01:58:29 runner 8 connected 2025/08/17 01:58:34 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 01:58:35 base crash: WARNING in xfrm6_tunnel_net_exit 2025/08/17 01:58:36 runner 1 connected 2025/08/17 01:58:41 patched crashed: general protection fault in __pcpu_freelist_pop [need repro = false] 2025/08/17 01:59:11 runner 2 connected 2025/08/17 01:59:24 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/08/17 01:59:31 runner 6 connected 2025/08/17 01:59:31 runner 1 connected 2025/08/17 01:59:38 runner 5 connected 2025/08/17 01:59:45 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 01:59:48 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:59:53 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 01:59:54 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 02:00:13 runner 9 connected 2025/08/17 02:00:43 runner 8 connected 2025/08/17 02:00:44 runner 7 connected 2025/08/17 02:00:49 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 02:00:50 runner 2 connected 2025/08/17 02:01:38 runner 5 connected 2025/08/17 02:01:56 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 51, "corpus": 12233, "corpus [files]": 1820, "corpus [symbols]": 1855, "cover overflows": 22531, "coverage": 87937, "distributor delayed": 16421, "distributor undelayed": 16421, "distributor violated": 78, "exec candidate": 27492, "exec collide": 96490, "exec fuzz": 181715, "exec gen": 9508, "exec hints": 32713, "exec inject": 0, "exec minimize": 2727, "exec retries": 225, "exec seeds": 382, "exec smash": 3177, "exec total [base]": 202829, "exec total [new]": 442011, "exec triage": 41727, "executor restarts": 1397, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 7, "hints jobs": 4, "max signal": 93692, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1438, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13357, "no exec duration": 1434947000000, "no exec requests": 4685, "pending": 0, "prog exec time": 454, "reproducing": 0, "rpc recv": 13226078072, "rpc sent": 2823671256, "signal": 85596, "smash jobs": 0, "triage jobs": 0, "vm output": 32812429, "vm restarts [base]": 119, "vm restarts [new]": 257 } 2025/08/17 02:02:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/08/17 02:02:36 patched crashed: lost connection to test machine [need repro = false] 2025/08/17 02:02:47 base crash: lost connection to test machine 2025/08/17 02:03:03 runner 9 connected 2025/08/17 02:03:08 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 02:03:19 patched crashed: KASAN: slab-out-of-bounds Write in __bpf_get_stackid [need repro = false] 2025/08/17 02:03:25 runner 5 connected 2025/08/17 02:03:31 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/08/17 02:03:36 runner 3 connected 2025/08/17 02:03:57 base crash: INFO: task hung in __tun_chr_ioctl 2025/08/17 02:03:58 runner 2 connected 2025/08/17 02:03:58 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/08/17 02:04:08 runner 6 connected 2025/08/17 02:04:20 runner 1 connected 2025/08/17 02:04:35 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/08/17 02:04:48 runner 0 connected 2025/08/17 02:05:03 base crash: SYZFAIL: repeatedly failed to execute the program 2025/08/17 02:05:32 runner 7 connected 2025/08/17 02:05:33 new: boot error: can't ssh into the instance 2025/08/17 02:05:35 new: boot error: can't ssh into the instance 2025/08/17 02:06:24 runner 4 connected 2025/08/17 02:06:30 runner 3 connected 2025/08/17 02:06:52 status reporting terminated 2025/08/17 02:06:52 bug reporting terminated 2025/08/17 02:09:51 syz-diff (new): kernel context loop terminated 2025/08/17 02:15:09 syz-diff (base): kernel context loop terminated 2025/08/17 02:15:09 diff fuzzing terminated 2025/08/17 02:15:09 fuzzing is finished 2025/08/17 02:15:09 status at the end: Title On-Base On-Patched INFO: rcu detected stall in __tun_chr_ioctl 1 crashes INFO: rcu detected stall in futex 1 crashes INFO: rcu detected stall in sys_bpf 1 crashes INFO: rcu detected stall in sys_mkdir 1 crashes INFO: rcu detected stall in sys_sendmsg 1 crashes INFO: task hung in __tun_chr_ioctl 1 crashes INFO: task hung in bpf_xdp_link_attach 1 crashes INFO: task hung in cfg80211_wiphy_work 1 crashes INFO: task hung in nfsd_nl_listener_get_doit 1 crashes INFO: task hung in nfsd_nl_rpc_status_get_dumpit 1 crashes INFO: task hung in tun_chr_close 1 crashes 1 crashes KASAN: slab-out-of-bounds Write in __bpf_get_stackid 12 crashes 18 crashes KASAN: slab-use-after-free Read in __xfrm_state_insert 1 crashes KASAN: slab-use-after-free Read in __xfrm_state_lookup 2 crashes 11 crashes KASAN: slab-use-after-free Read in xfrm_alloc_spi 10 crashes 27 crashes KASAN: slab-use-after-free Write in __xfrm_state_delete 3 crashes 3 crashes KFENCE: use-after-free read in xfrm_alloc_spi 1 crashes SYZFAIL: repeatedly failed to execute the program 1 crashes WARNING in xfrm6_tunnel_net_exit 8 crashes 10 crashes WARNING in xfrm_state_fini 31 crashes 84 crashes general protection fault in __pcpu_freelist_pop 3 crashes 1 crashes general protection fault in xfrm_alloc_spi 1 crashes 1 crashes lost connection to test machine 41 crashes 84 crashes no output from test machine 1 crashes 2 crashes