2025/09/18 10:36:59 extracted 327364 text symbol hashes for base and 327418 for patched 2025/09/18 10:36:59 symbol "__sancov_gen_cov_switch_values.978" has different values in base vs patch 2025/09/18 10:36:59 binaries are different, continuing fuzzing 2025/09/18 10:36:59 adding modified_functions to focus areas: ["__add_used_btf" "__add_used_map" "__arch_prepare_bpf_trampoline" "__btf_type_is_scalar_struct" "__check_mem_access" "__check_ptr_off_reg" "__check_reg_arg" "__mark_chain_precision" "__mark_reg_const_zero" "__mark_reg_not_init" "__mark_reg_s32_range" "__mark_reg_unknown" "__pfx_adjust_btf_func" "__pfx_bpf_insn_array_adjust" "__pfx_bpf_insn_array_adjust_after_remove" "__pfx_bpf_insn_array_init" "__pfx_bpf_insn_array_ready" "__pfx_bpf_insn_array_release" "__pfx_bpf_prog_mark_insn_arrays_ready" "__pfx_bpf_prog_update_insn_ptr" "__pfx_check_indirect_jump" "__pfx_cmp_ptr_to_u32" "__pfx_insn_array_alloc" "__pfx_insn_array_alloc_check" "__pfx_insn_array_check_btf" "__pfx_insn_array_delete_elem" "__pfx_insn_array_free" "__pfx_insn_array_get_next_key" "__pfx_insn_array_lookup_elem" "__pfx_insn_array_map_direct_value_addr" "__pfx_insn_array_mem_usage" "__pfx_insn_array_update_elem" "__pfx_insn_successors" "__pfx_mark_subprog_changes_pkt_data" "__pfx_opt_hard_wire_dead_code_branches" "__pfx_opt_remove_dead_code" "__pfx_opt_remove_nops" "__pfx_opt_subreg_zext_lo32_rnd_hi32" "__pfx_sanitize_dead_code" "__process_kf_arg_ptr_to_graph_node" "__process_kf_arg_ptr_to_graph_root" "__sys_bpf" "__uprobe_perf_func" "acquire_reference" "add_kfunc_call" "add_subprog" "add_subprog_and_kfunc" "add_used_map" "adjust_btf_func" "adjust_ptr_min_max_vals" "adjust_reg_min_max_vals" "adjust_scalar_min_max_vals" "assign_scalar_id_before_mov" "bpf_arch_poke_desc_update" "bpf_check" "bpf_copy_to_user" "bpf_insn_array_adjust" "bpf_insn_array_adjust_after_remove" "bpf_insn_array_init" "bpf_insn_array_ready" "bpf_insn_array_release" "bpf_int_jit_compile" "bpf_iter_create" "bpf_jit_blind_constants" "bpf_link_get_fd_by_id" "bpf_map_alloc_id" "bpf_obj_get_info_by_fd" "bpf_obj_get_next_id" "bpf_patch_insn_data" "bpf_perf_link_fill_common" "bpf_prog_alloc_id" "bpf_prog_attach" "bpf_prog_detach" "bpf_prog_load" "bpf_prog_mark_insn_arrays_ready" "bpf_prog_update_insn_ptr" "bpf_raw_tracepoint_open" "bpf_show_options" "bpf_task_fd_query" "bpf_task_fd_query_copy" "bpf_token_allow_map_type" "bpf_token_show_fdinfo" "bpf_verifier_log_write" "bt_subprog_enter" "bt_subprog_exit" "btf_check_subprog_call" "btf_prepare_func_args" "check_attach_btf_id" "check_bpf_snprintf_call" "check_btf_info" "check_btf_info_early" "check_buffer_access" "check_cfg" "check_cond_jmp_op" "check_ctx_access" "check_func_arg_reg_off" "check_func_call" "check_get_func_ip" "check_helper_call" "check_helper_mem_access" "check_indirect_jump" "check_kfunc_call" "check_ld_imm" "check_load_mem" "check_map_access" "check_map_func_compatibility" "check_map_kptr_access" "check_mem_access" "check_mem_region_access" "check_mem_size_reg" "check_packet_access" "check_pseudo_btf_id" "check_ptr_alignment" "check_ptr_to_btf_access" "check_ptr_to_map_access" "check_reg_arg" "check_reg_const_str" "check_reg_sane_offset" "check_reg_type" "check_resource_leak" "check_return_code" "check_sock_access" "check_special_kfunc" "check_stack_access_within_bounds" "check_stack_range_initialized" "check_stack_read" "check_stack_write" "check_store_reg" "check_subprogs" "check_tp_buffer_access" "clear_caller_saved_regs" "cmp_ptr_to_u32" "coerce_reg_to_size" "compute_live_registers" "compute_scc" "compute_scc_callchain" "copy_verifier_state" "destroy_if_dynptr_stack_slot" "do_check" "do_check_common" "do_check_subprogs" "do_jit" "do_refine_retval_range" "dynptr_get_type" "dynptr_id" "dynptr_ref_obj_id" "emit_bpf_dispatcher" "emit_indirect_jump" "fetch_kfunc_meta" "find_kfunc_desc_btf" "find_subprog" "fixup_kfunc_call" "format_callchain" "generic_map_delete_batch" "generic_map_lookup_batch" "generic_map_update_batch" "get_call_summary" "get_constant_map_key" "get_dynptr_arg_reg" "incomplete_read_marks" "init_func_state" "insn_array_alloc" "insn_array_alloc_check" "insn_array_check_btf" "insn_array_delete_elem" "insn_array_free" "insn_array_get_next_key" "insn_array_lookup_elem" "insn_array_map_direct_value_addr" "insn_array_mem_usage" "insn_array_update_elem" "insn_successors" "invalidate_dynptr" "invalidate_non_owning_refs" "is_pointer_value" "is_trusted_reg" "link_create" "link_detach" "link_update" "map_create" "map_delete_elem" "map_kptr_match_type" "map_lookup_and_delete_elem" "map_lookup_elem" "map_set_for_each_callback_args" "map_update_elem" "mark_all_scalars_precise" "mark_btf_func_reg_size" "mark_btf_ld_reg" "mark_fastcall_patterns" "mark_ptr_or_null_reg" "mark_ptr_or_null_regs" "mark_reg_invalid" "mark_reg_known_zero" "mark_reg_not_init" "mark_reg_read" "mark_reg_stack_read" "mark_reg_unknown" "mark_subprog_changes_pkt_data" "mark_subprog_might_sleep" "may_update_sockmap" "maybe_widen_reg" "opt_hard_wire_dead_code_branches" "opt_remove_dead_code" "opt_remove_nops" "opt_subreg_zext_lo32_rnd_hi32" "print_bpf_insn" "print_insn_state" "print_reg_state" "print_verifier_state" "process_bpf_exit_full" "process_dynptr_func" "process_irq_flag" "process_iter_arg" "process_iter_next_call" "process_kf_arg_ptr_to_btf_id" "process_kptr_func" "process_spin_lock" "process_timer_func" "process_wq_func" "propagate_liveness" "propagate_precision" "push_callback_call" "push_insn" "push_jmp_history" "push_stack" "record_func_key" "record_func_map" "ref_convert_owning_non_owning" "ref_set_non_owning" "reg_bounds_sanity_check" "reg_set_min_max" "reg_type_str" "regsafe" "release_reference" "resolve_pseudo_ldimm64" "sanitize_check_bounds" "sanitize_dead_code" "sanitize_err" "sanitize_ptr_alu" "sanitize_speculative_path" "save_aux_ptr_type" "scalar_reg_for_stack" "set_find_vma_callback_state" "set_loop_callback_state" "set_map_elem_callback_state" "set_rbtree_add_callback_state" "set_timer_callback_state" "set_user_ringbuf_callback_state" "setup_func_entry" "specialize_kfunc" "stack_slot_obj_get_spi" "states_equal" "trace_call_bpf" "unmark_stack_slots_dynptr" "unmark_stack_slots_iter" "update_loop_inline_state" "verbose" "verbose_invalid_scalar" "verbose_linfo" "verifier_remove_insns" "visit_func_call_insn" "widen_imprecise_scalars"] 2025/09/18 10:36:59 adding directly modified files to focus areas: ["arch/x86/net/bpf_jit_comp.c" "include/linux/bpf.h" "include/linux/bpf_types.h" "include/linux/bpf_verifier.h" "include/uapi/linux/bpf.h" "kernel/bpf/Makefile" "kernel/bpf/bpf_insn_array.c" "kernel/bpf/core.c" "kernel/bpf/disasm.c" "kernel/bpf/log.c" "kernel/bpf/syscall.c" "kernel/bpf/verifier.c" "tools/bpf/bpftool/Documentation/bpftool-map.rst" "tools/bpf/bpftool/map.c" "tools/include/uapi/linux/bpf.h" "tools/lib/bpf/libbpf.c" "tools/lib/bpf/libbpf_probes.c" "tools/lib/bpf/linker.c" "tools/testing/selftests/bpf/Makefile" "tools/testing/selftests/bpf/prog_tests/bpf_gotox.c" "tools/testing/selftests/bpf/prog_tests/bpf_insn_array.c" "tools/testing/selftests/bpf/progs/bpf_gotox.c"] 2025/09/18 10:36:59 downloaded the corpus from https://storage.googleapis.com/syzkaller/corpus/ci-upstream-bpf-kasan-gce-corpus.db 2025/09/18 10:37:48 runner 5 connected 2025/09/18 10:37:49 runner 1 connected 2025/09/18 10:37:49 runner 8 connected 2025/09/18 10:37:49 runner 7 connected 2025/09/18 10:37:49 runner 1 connected 2025/09/18 10:37:49 runner 2 connected 2025/09/18 10:37:49 runner 0 connected 2025/09/18 10:37:50 runner 6 connected 2025/09/18 10:37:50 runner 2 connected 2025/09/18 10:37:55 initializing coverage information... 2025/09/18 10:37:56 executor cover filter: 0 PCs 2025/09/18 10:37:57 runner 3 connected 2025/09/18 10:37:57 runner 3 connected 2025/09/18 10:37:57 runner 0 connected 2025/09/18 10:37:57 runner 9 connected 2025/09/18 10:37:58 runner 4 connected 2025/09/18 10:37:58 machine check: disabled the following syscalls: socket$hf : socket$hf(0x13, 0x2, 0x0) failed: address family not supported by protocol socket$inet6_dccp : socket$inet6_dccp(0xa, 0x6, 0x0) failed: socket type not supported socket$inet_dccp : socket$inet_dccp(0x2, 0x6, 0x0) failed: socket type not supported socket$vsock_dgram : socket$vsock_dgram(0x28, 0x2, 0x0) failed: no such device transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] recvmsg$hf : sock_hf [socket$hf] recvmsg$inet_nvme : nvme_sock [syz_socket_connect_nvme_tcp] sendmsg$802154_dgram : sock_802154_dgram [syz_init_net_socket$802154_dgram] sendmsg$802154_raw : sock_802154_raw [syz_init_net_socket$802154_raw] sendmsg$BATADV_CMD_GET_BLA_BACKBONE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_BLA_CLAIM : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_DAT_CACHE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_GATEWAYS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MCAST_FLAGS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_NEIGHBORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ORIGINATORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ROUTING_ALGOS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER_CANCEL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$DEVLINK_CMD_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_UNSPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_DEL : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_NEW : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RELOAD : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$ETHTOOL_MSG_CHANNELS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_CHANNELS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKSTATE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_STRSET_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_TSINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$FOU_CMD_ADD : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_DEL : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_GET : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$GTP_CMD_DELPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_ECHOREQ : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_GETPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_NEWPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$IEEE802154_ADD_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_RESP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_DISASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_GETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_SETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SCAN_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SET_MACPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_START_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IPVS_CMD_DEL_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_FLUSH : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_ZERO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$L2TP_CMD_NOOP : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$MPTCP_PM_CMD_ADD_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_ANNOUNCE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_DEL_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_REMOVE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_FLAGS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$NBD_CMD_CONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_DISCONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_RECONFIGURE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_STATUS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_START : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_STOP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DISABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ENABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_FW_DOWNLOAD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_DEVICE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_GET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SDREQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_SE_IO : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_START_POLL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_VENDOR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL80211_CMD_ABORT_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_AUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONTROL_PORT_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEAUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISCONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_EXTERNAL_AUTH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FLUSH_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SURVEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NOTIFY_RADAR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PEER_MEASUREMENT_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_CLIENT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_MESH_LINK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RADAR_DETECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_BEACONS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RELOAD_REGDB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REQ_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BEACON : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CQM : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MAC_ACL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MCAST_RATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_NOACK_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_QOS_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TID_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WDS_PEER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY_NETNS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_MGMT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_OPER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TESTMODE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TRIGGER_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UNEXPECTED_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_FT_IES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_OWE_INFO : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_VENDOR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL802154_CMD_DEL_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_WPAN_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CHANNEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_LBT_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_PAN_ID : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SEC_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SHORT_ADDR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_TX_POWER : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_PROTOCOLS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_VERSION : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_ACCEPT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$SEG6_CMD_DUMPHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_GET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SETHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SMC_PNETID_ADD : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_DEL : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_FLUSH : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_GET : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$TEAM_CMD_NOOP : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_SET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_PORT_LIST_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TIPC_CMD_DISABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_ENABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_BEARER_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_LINKS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MAX_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MEDIA_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NODES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_REMOTE_MNG : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_RESET_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_PRI : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_TOL : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_WINDOW : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NODE_ADDR : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_NAME_TABLE : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_NL_BEARER_ADD : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_DISABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_ENABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_FLUSH : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_RESET_STATS : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_PEER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NAME_TABLE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NODE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PEER_REMOVE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PUBL_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_SOCK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_UDP_GET_REMOTEIP : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$WG_CMD_GET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$WG_CMD_SET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$alg : sock_algconn [accept$alg accept4$alg] sendmsg$can_bcm : timespec [clock_gettime] sendmsg$hf : sock_hf [socket$hf] sendmsg$nfc_llcp : sock_nfc_llcp [accept$nfc_llcp accept4$nfc_llcp syz_init_net_socket$nfc_llcp] sendmsg$nl_route : ifindex_vcan [ioctl$ifreq_SIOCGIFINDEX_vcan] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 311/8054 2025/09/18 10:37:58 base: machine check complete 2025/09/18 10:37:59 discovered 7700 source files, 338815 symbols 2025/09/18 10:38:00 coverage filter: __add_used_btf: [__add_used_btf] 2025/09/18 10:38:00 coverage filter: __add_used_map: [__add_used_map] 2025/09/18 10:38:00 coverage filter: __arch_prepare_bpf_trampoline: [__arch_prepare_bpf_trampoline] 2025/09/18 10:38:00 coverage filter: __btf_type_is_scalar_struct: [__btf_type_is_scalar_struct] 2025/09/18 10:38:00 coverage filter: __check_mem_access: [__check_mem_access] 2025/09/18 10:38:00 coverage filter: __check_ptr_off_reg: [__check_ptr_off_reg] 2025/09/18 10:38:00 coverage filter: __check_reg_arg: [__check_reg_arg] 2025/09/18 10:38:00 coverage filter: __mark_chain_precision: [__mark_chain_precision] 2025/09/18 10:38:00 coverage filter: __mark_reg_const_zero: [__mark_reg_const_zero] 2025/09/18 10:38:00 coverage filter: __mark_reg_not_init: [__mark_reg_not_init] 2025/09/18 10:38:00 coverage filter: __mark_reg_s32_range: [__mark_reg_s32_range] 2025/09/18 10:38:00 coverage filter: __mark_reg_unknown: [__mark_reg_unknown] 2025/09/18 10:38:00 coverage filter: __pfx_adjust_btf_func: [] 2025/09/18 10:38:00 coverage filter: __pfx_bpf_insn_array_adjust: [] 2025/09/18 10:38:00 coverage filter: __pfx_bpf_insn_array_adjust_after_remove: [] 2025/09/18 10:38:00 coverage filter: __pfx_bpf_insn_array_init: [] 2025/09/18 10:38:00 coverage filter: __pfx_bpf_insn_array_ready: [] 2025/09/18 10:38:00 coverage filter: __pfx_bpf_insn_array_release: [] 2025/09/18 10:38:00 coverage filter: __pfx_bpf_prog_mark_insn_arrays_ready: [] 2025/09/18 10:38:00 coverage filter: __pfx_bpf_prog_update_insn_ptr: [] 2025/09/18 10:38:00 coverage filter: __pfx_check_indirect_jump: [] 2025/09/18 10:38:00 coverage filter: __pfx_cmp_ptr_to_u32: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_alloc: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_alloc_check: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_check_btf: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_delete_elem: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_free: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_get_next_key: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_lookup_elem: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_map_direct_value_addr: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_mem_usage: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_array_update_elem: [] 2025/09/18 10:38:00 coverage filter: __pfx_insn_successors: [] 2025/09/18 10:38:00 coverage filter: __pfx_mark_subprog_changes_pkt_data: [] 2025/09/18 10:38:00 coverage filter: __pfx_opt_hard_wire_dead_code_branches: [] 2025/09/18 10:38:00 coverage filter: __pfx_opt_remove_dead_code: [] 2025/09/18 10:38:00 coverage filter: __pfx_opt_remove_nops: [] 2025/09/18 10:38:00 coverage filter: __pfx_opt_subreg_zext_lo32_rnd_hi32: [] 2025/09/18 10:38:00 coverage filter: __pfx_sanitize_dead_code: [] 2025/09/18 10:38:00 coverage filter: __process_kf_arg_ptr_to_graph_node: [__process_kf_arg_ptr_to_graph_node] 2025/09/18 10:38:00 coverage filter: __process_kf_arg_ptr_to_graph_root: [__process_kf_arg_ptr_to_graph_root] 2025/09/18 10:38:00 coverage filter: __sys_bpf: [__sys_bpf] 2025/09/18 10:38:00 coverage filter: __uprobe_perf_func: [__uprobe_perf_func] 2025/09/18 10:38:00 coverage filter: acquire_reference: [acquire_reference] 2025/09/18 10:38:00 coverage filter: add_kfunc_call: [add_kfunc_call] 2025/09/18 10:38:00 coverage filter: add_subprog: [add_subprog add_subprog_and_kfunc] 2025/09/18 10:38:00 coverage filter: add_subprog_and_kfunc: [] 2025/09/18 10:38:00 coverage filter: add_used_map: [add_used_map] 2025/09/18 10:38:00 coverage filter: adjust_btf_func: [adjust_btf_func] 2025/09/18 10:38:00 coverage filter: adjust_ptr_min_max_vals: [adjust_ptr_min_max_vals] 2025/09/18 10:38:00 coverage filter: adjust_reg_min_max_vals: [adjust_reg_min_max_vals] 2025/09/18 10:38:00 coverage filter: adjust_scalar_min_max_vals: [adjust_scalar_min_max_vals] 2025/09/18 10:38:00 coverage filter: assign_scalar_id_before_mov: [assign_scalar_id_before_mov] 2025/09/18 10:38:00 coverage filter: bpf_arch_poke_desc_update: [bpf_arch_poke_desc_update] 2025/09/18 10:38:00 coverage filter: bpf_check: [bpf_check bpf_check_attach_target bpf_check_timed_may_goto bpf_check_uarg_tail_zero cookie_bpf_check] 2025/09/18 10:38:00 coverage filter: bpf_copy_to_user: [bpf_copy_to_user] 2025/09/18 10:38:00 coverage filter: bpf_insn_array_adjust: [bpf_insn_array_adjust bpf_insn_array_adjust_after_remove] 2025/09/18 10:38:00 coverage filter: bpf_insn_array_adjust_after_remove: [] 2025/09/18 10:38:00 coverage filter: bpf_insn_array_init: [bpf_insn_array_init] 2025/09/18 10:38:00 coverage filter: bpf_insn_array_ready: [bpf_insn_array_ready] 2025/09/18 10:38:00 coverage filter: bpf_insn_array_release: [bpf_insn_array_release] 2025/09/18 10:38:00 coverage filter: bpf_int_jit_compile: [bpf_int_jit_compile] 2025/09/18 10:38:00 coverage filter: bpf_iter_create: [bpf_iter_create] 2025/09/18 10:38:00 coverage filter: bpf_jit_blind_constants: [bpf_jit_blind_constants] 2025/09/18 10:38:00 coverage filter: bpf_link_get_fd_by_id: [bpf_link_get_fd_by_id] 2025/09/18 10:38:00 coverage filter: bpf_map_alloc_id: [bpf_map_alloc_id] 2025/09/18 10:38:00 coverage filter: bpf_obj_get_info_by_fd: [bpf_obj_get_info_by_fd] 2025/09/18 10:38:00 coverage filter: bpf_obj_get_next_id: [bpf_obj_get_next_id] 2025/09/18 10:38:00 coverage filter: bpf_patch_insn_data: [bpf_patch_insn_data] 2025/09/18 10:38:00 coverage filter: bpf_perf_link_fill_common: [bpf_perf_link_fill_common] 2025/09/18 10:38:00 coverage filter: bpf_prog_alloc_id: [bpf_prog_alloc_id] 2025/09/18 10:38:00 coverage filter: bpf_prog_attach: [bpf_prog_attach bpf_prog_attach_check_attach_type flow_dissector_bpf_prog_attach_check netns_bpf_prog_attach] 2025/09/18 10:38:00 coverage filter: bpf_prog_detach: [bpf_prog_detach netns_bpf_prog_detach] 2025/09/18 10:38:00 coverage filter: bpf_prog_load: [bpf_lsm_bpf_prog_load bpf_prog_load bpf_prog_load_check_attach security_bpf_prog_load] 2025/09/18 10:38:00 coverage filter: bpf_prog_mark_insn_arrays_ready: [bpf_prog_mark_insn_arrays_ready] 2025/09/18 10:38:00 coverage filter: bpf_prog_update_insn_ptr: [bpf_prog_update_insn_ptr] 2025/09/18 10:38:00 coverage filter: bpf_raw_tracepoint_open: [bpf_raw_tracepoint_open] 2025/09/18 10:38:00 coverage filter: bpf_show_options: [bpf_show_options] 2025/09/18 10:38:00 coverage filter: bpf_task_fd_query: [bpf_task_fd_query bpf_task_fd_query_copy] 2025/09/18 10:38:00 coverage filter: bpf_task_fd_query_copy: [] 2025/09/18 10:38:00 coverage filter: bpf_token_allow_map_type: [bpf_token_allow_map_type] 2025/09/18 10:38:00 coverage filter: bpf_token_show_fdinfo: [bpf_token_show_fdinfo] 2025/09/18 10:38:00 coverage filter: bpf_verifier_log_write: [bpf_verifier_log_write] 2025/09/18 10:38:00 coverage filter: bt_subprog_enter: [bt_subprog_enter] 2025/09/18 10:38:00 coverage filter: bt_subprog_exit: [bt_subprog_exit] 2025/09/18 10:38:00 coverage filter: btf_check_subprog_call: [btf_check_subprog_call] 2025/09/18 10:38:00 coverage filter: btf_prepare_func_args: [btf_prepare_func_args] 2025/09/18 10:38:00 coverage filter: check_attach_btf_id: [check_attach_btf_id] 2025/09/18 10:38:00 coverage filter: check_bpf_snprintf_call: [check_bpf_snprintf_call] 2025/09/18 10:38:00 coverage filter: check_btf_info: [check_btf_info check_btf_info_early] 2025/09/18 10:38:00 coverage filter: check_btf_info_early: [] 2025/09/18 10:38:00 coverage filter: check_buffer_access: [check_buffer_access] 2025/09/18 10:38:00 coverage filter: check_cfg: [check_cfg] 2025/09/18 10:38:00 coverage filter: check_cond_jmp_op: [check_cond_jmp_op] 2025/09/18 10:38:00 coverage filter: check_ctx_access: [check_ctx_access] 2025/09/18 10:38:00 coverage filter: check_func_arg_reg_off: [check_func_arg_reg_off] 2025/09/18 10:38:00 coverage filter: check_func_call: [check_func_call] 2025/09/18 10:38:00 coverage filter: check_get_func_ip: [check_get_func_ip] 2025/09/18 10:38:00 coverage filter: check_helper_call: [check_helper_call] 2025/09/18 10:38:00 coverage filter: check_helper_mem_access: [check_helper_mem_access] 2025/09/18 10:38:00 coverage filter: check_indirect_jump: [check_indirect_jump] 2025/09/18 10:38:00 coverage filter: check_kfunc_call: [check_kfunc_call] 2025/09/18 10:38:00 coverage filter: check_ld_imm: [check_ld_imm] 2025/09/18 10:38:00 coverage filter: check_load_mem: [check_load_mem] 2025/09/18 10:38:00 coverage filter: check_map_access: [check_map_access] 2025/09/18 10:38:00 coverage filter: check_map_func_compatibility: [check_map_func_compatibility] 2025/09/18 10:38:00 coverage filter: check_map_kptr_access: [check_map_kptr_access] 2025/09/18 10:38:00 coverage filter: check_mem_access: [check_mem_access] 2025/09/18 10:38:00 coverage filter: check_mem_region_access: [check_mem_region_access] 2025/09/18 10:38:00 coverage filter: check_mem_size_reg: [check_mem_size_reg] 2025/09/18 10:38:00 coverage filter: check_packet_access: [check_packet_access] 2025/09/18 10:38:00 coverage filter: check_pseudo_btf_id: [check_pseudo_btf_id] 2025/09/18 10:38:00 coverage filter: check_ptr_alignment: [check_ptr_alignment] 2025/09/18 10:38:00 coverage filter: check_ptr_to_btf_access: [check_ptr_to_btf_access] 2025/09/18 10:38:00 coverage filter: check_ptr_to_map_access: [check_ptr_to_map_access] 2025/09/18 10:38:00 coverage filter: check_reg_arg: [check_reg_arg] 2025/09/18 10:38:00 coverage filter: check_reg_const_str: [check_reg_const_str] 2025/09/18 10:38:00 coverage filter: check_reg_sane_offset: [check_reg_sane_offset] 2025/09/18 10:38:00 coverage filter: check_reg_type: [check_reg_type] 2025/09/18 10:38:00 coverage filter: check_resource_leak: [check_resource_leak] 2025/09/18 10:38:00 coverage filter: check_return_code: [check_return_code] 2025/09/18 10:38:00 coverage filter: check_sock_access: [check_sock_access] 2025/09/18 10:38:00 coverage filter: check_special_kfunc: [check_special_kfunc] 2025/09/18 10:38:00 coverage filter: check_stack_access_within_bounds: [check_stack_access_within_bounds] 2025/09/18 10:38:00 coverage filter: check_stack_range_initialized: [check_stack_range_initialized] 2025/09/18 10:38:00 coverage filter: check_stack_read: [check_stack_read] 2025/09/18 10:38:00 coverage filter: check_stack_write: [check_stack_write] 2025/09/18 10:38:00 coverage filter: check_store_reg: [check_store_reg] 2025/09/18 10:38:00 coverage filter: check_subprogs: [check_subprogs do_check_subprogs] 2025/09/18 10:38:00 coverage filter: check_tp_buffer_access: [check_tp_buffer_access] 2025/09/18 10:38:00 coverage filter: clear_caller_saved_regs: [clear_caller_saved_regs] 2025/09/18 10:38:00 coverage filter: cmp_ptr_to_u32: [cmp_ptr_to_u32] 2025/09/18 10:38:00 coverage filter: coerce_reg_to_size: [coerce_reg_to_size coerce_reg_to_size_sx] 2025/09/18 10:38:00 coverage filter: compute_live_registers: [compute_live_registers] 2025/09/18 10:38:00 coverage filter: compute_scc: [compute_scc compute_scc_callchain] 2025/09/18 10:38:00 coverage filter: compute_scc_callchain: [] 2025/09/18 10:38:00 coverage filter: copy_verifier_state: [copy_verifier_state] 2025/09/18 10:38:00 coverage filter: destroy_if_dynptr_stack_slot: [destroy_if_dynptr_stack_slot] 2025/09/18 10:38:00 coverage filter: do_check: [do_check do_check_common do_checkpoint jbd2_log_do_checkpoint nfs4_do_check_delegation xdp_do_check_flushed] 2025/09/18 10:38:00 coverage filter: do_check_common: [] 2025/09/18 10:38:00 coverage filter: do_check_subprogs: [] 2025/09/18 10:38:00 coverage filter: do_jit: [do_jit] 2025/09/18 10:38:00 coverage filter: do_refine_retval_range: [do_refine_retval_range] 2025/09/18 10:38:00 coverage filter: dynptr_get_type: [dynptr_get_type] 2025/09/18 10:38:00 coverage filter: dynptr_id: [dynptr_id] 2025/09/18 10:38:00 coverage filter: dynptr_ref_obj_id: [dynptr_ref_obj_id] 2025/09/18 10:38:00 coverage filter: emit_bpf_dispatcher: [emit_bpf_dispatcher] 2025/09/18 10:38:00 coverage filter: emit_indirect_jump: [emit_indirect_jump] 2025/09/18 10:38:00 coverage filter: fetch_kfunc_meta: [fetch_kfunc_meta] 2025/09/18 10:38:00 coverage filter: find_kfunc_desc_btf: [find_kfunc_desc_btf] 2025/09/18 10:38:00 coverage filter: find_subprog: [find_subprog] 2025/09/18 10:38:00 coverage filter: fixup_kfunc_call: [fixup_kfunc_call] 2025/09/18 10:38:00 coverage filter: format_callchain: [format_callchain] 2025/09/18 10:38:00 coverage filter: generic_map_delete_batch: [generic_map_delete_batch] 2025/09/18 10:38:00 coverage filter: generic_map_lookup_batch: [generic_map_lookup_batch] 2025/09/18 10:38:00 coverage filter: generic_map_update_batch: [generic_map_update_batch] 2025/09/18 10:38:00 coverage filter: get_call_summary: [get_call_summary] 2025/09/18 10:38:00 coverage filter: get_constant_map_key: [get_constant_map_key] 2025/09/18 10:38:00 coverage filter: get_dynptr_arg_reg: [get_dynptr_arg_reg] 2025/09/18 10:38:00 coverage filter: incomplete_read_marks: [incomplete_read_marks] 2025/09/18 10:38:00 coverage filter: init_func_state: [init_func_state] 2025/09/18 10:38:00 coverage filter: insn_array_alloc: [insn_array_alloc insn_array_alloc_check] 2025/09/18 10:38:00 coverage filter: insn_array_alloc_check: [] 2025/09/18 10:38:00 coverage filter: insn_array_check_btf: [insn_array_check_btf] 2025/09/18 10:38:00 coverage filter: insn_array_delete_elem: [insn_array_delete_elem] 2025/09/18 10:38:00 coverage filter: insn_array_free: [insn_array_free] 2025/09/18 10:38:00 coverage filter: insn_array_get_next_key: [insn_array_get_next_key] 2025/09/18 10:38:00 coverage filter: insn_array_lookup_elem: [insn_array_lookup_elem] 2025/09/18 10:38:00 coverage filter: insn_array_map_direct_value_addr: [insn_array_map_direct_value_addr] 2025/09/18 10:38:00 coverage filter: insn_array_mem_usage: [insn_array_mem_usage] 2025/09/18 10:38:00 coverage filter: insn_array_update_elem: [insn_array_update_elem] 2025/09/18 10:38:00 coverage filter: insn_successors: [insn_successors] 2025/09/18 10:38:00 coverage filter: invalidate_dynptr: [invalidate_dynptr] 2025/09/18 10:38:00 coverage filter: invalidate_non_owning_refs: [invalidate_non_owning_refs] 2025/09/18 10:38:00 coverage filter: is_pointer_value: [is_pointer_value] 2025/09/18 10:38:00 coverage filter: is_trusted_reg: [is_trusted_reg] 2025/09/18 10:38:00 coverage filter: link_create: [__netlink_create __probestub_ocfs2_symlink_create __traceiter_ocfs2_symlink_create bpf_struct_ops_link_create dsa_port_phylink_create fw_devlink_create_devlink link_create mdev_link_create_link_store netlink_create netns_bpf_link_create phylink_create rtnl_newlink_create sock_map_link_create tipc_link_create tipc_link_create_dummy_tnl_msg trace_ocfs2_symlink_create] 2025/09/18 10:38:00 coverage filter: link_detach: [ata_scsi_handle_link_detach bpf_netns_link_detach bpf_nf_link_detach bpf_struct_ops_map_link_detach bpf_xdp_link_detach link_detach netlink_detachskb sock_map_link_detach tcx_link_detach] 2025/09/18 10:38:00 coverage filter: link_update: [__bpf_trace_xfs_iunlink_update_bucket __bpf_trace_xfs_iunlink_update_dinode __probestub_xfs_iunlink_update_bucket __probestub_xfs_iunlink_update_dinode __probestub_xfs_reflink_update_inode_size __probestub_xfs_reflink_update_inode_size_error __traceiter_xfs_iunlink_update_bucket __traceiter_xfs_iunlink_update_dinode __traceiter_xfs_reflink_update_inode_size __traceiter_xfs_reflink_update_inode_size_error bpf_netns_link_update_prog bpf_nf_link_update bpf_struct_ops_map_link_update bpf_xdp_link_update fixed_phy_set_link_update ieee80211_link_update_chanreq ipgre_link_update link_update netlink_update_listeners netlink_update_socket_mc ocfs2_reflink_update_dest perf_trace_xfs_iunlink_update_bucket perf_trace_xfs_iunlink_update_dinode sock_map_link_update_prog tcx_link_update tipc_link_update_caps tipc_link_update_cwin trace_event_raw_event_xfs_iunlink_update_bucket trace_event_raw_event_xfs_iunlink_update_dinode trace_raw_output_xfs_iunlink_update_bucket trace_raw_output_xfs_iunlink_update_dinode trace_xfs_reflink_update_inode_size xfs_iunlink_update_bucket xfs_reflink_update_dest] 2025/09/18 10:38:00 coverage filter: map_create: [__bitmap_create bitmap_create bpf_lsm_bpf_map_create map_create security_bpf_map_create xfs_rtbitmap_create] 2025/09/18 10:38:00 coverage filter: map_delete_elem: [__fd_array_map_delete_elem arena_map_delete_elem array_map_delete_elem bloom_map_delete_elem bpf_map_delete_elem bpf_struct_ops_map_delete_elem cpu_map_delete_elem dev_map_delete_elem fd_array_map_delete_elem htab_lru_map_delete_elem htab_map_delete_elem map_delete_elem nsim_map_delete_elem queue_stack_map_delete_elem ringbuf_map_delete_elem sock_map_delete_elem stack_map_delete_elem xsk_map_delete_elem] 2025/09/18 10:38:00 coverage filter: map_kptr_match_type: [map_kptr_match_type] 2025/09/18 10:38:00 coverage filter: map_lookup_and_delete_elem: [__htab_map_lookup_and_delete_elem htab_lru_map_lookup_and_delete_elem htab_lru_percpu_map_lookup_and_delete_elem htab_map_lookup_and_delete_elem htab_percpu_map_lookup_and_delete_elem map_lookup_and_delete_elem] 2025/09/18 10:38:00 coverage filter: map_lookup_elem: [__htab_map_lookup_elem arena_map_lookup_elem array_map_lookup_elem array_of_map_lookup_elem bloom_map_lookup_elem bpf_fd_array_map_lookup_elem bpf_fd_htab_map_lookup_elem bpf_map_lookup_elem bpf_struct_ops_map_lookup_elem cpu_map_lookup_elem dev_map_lookup_elem fd_array_map_lookup_elem htab_lru_map_lookup_elem htab_lru_map_lookup_elem_sys htab_lru_percpu_map_lookup_elem htab_map_lookup_elem htab_of_map_lookup_elem htab_percpu_map_lookup_elem map_lookup_elem nsim_map_lookup_elem percpu_array_map_lookup_elem queue_stack_map_lookup_elem ringbuf_map_lookup_elem stack_map_lookup_elem xsk_map_lookup_elem xsk_map_lookup_elem_sys_only] 2025/09/18 10:38:00 coverage filter: map_set_for_each_callback_args: [map_set_for_each_callback_args] 2025/09/18 10:38:00 coverage filter: map_update_elem: [__htab_lru_percpu_map_update_elem arena_map_update_elem array_map_update_elem bloom_map_update_elem bpf_fd_array_map_update_elem bpf_fd_htab_map_update_elem bpf_map_update_elem bpf_struct_ops_map_update_elem cpu_map_update_elem dev_map_update_elem htab_lru_map_update_elem htab_lru_percpu_map_update_elem htab_map_update_elem htab_map_update_elem_in_place htab_percpu_map_update_elem map_update_elem nsim_map_update_elem queue_stack_map_update_elem ringbuf_map_update_elem sock_map_update_elem sock_map_update_elem_sys stack_map_update_elem xsk_map_update_elem] 2025/09/18 10:38:00 coverage filter: mark_all_scalars_precise: [mark_all_scalars_precise] 2025/09/18 10:38:00 coverage filter: mark_btf_func_reg_size: [mark_btf_func_reg_size] 2025/09/18 10:38:00 coverage filter: mark_btf_ld_reg: [mark_btf_ld_reg] 2025/09/18 10:38:00 coverage filter: mark_fastcall_patterns: [mark_fastcall_patterns] 2025/09/18 10:38:00 coverage filter: mark_ptr_or_null_reg: [mark_ptr_or_null_reg mark_ptr_or_null_regs] 2025/09/18 10:38:00 coverage filter: mark_ptr_or_null_regs: [] 2025/09/18 10:38:00 coverage filter: mark_reg_invalid: [mark_reg_invalid] 2025/09/18 10:38:00 coverage filter: mark_reg_known_zero: [mark_reg_known_zero] 2025/09/18 10:38:00 coverage filter: mark_reg_not_init: [mark_reg_not_init] 2025/09/18 10:38:00 coverage filter: mark_reg_read: [mark_reg_read] 2025/09/18 10:38:00 coverage filter: mark_reg_stack_read: [mark_reg_stack_read] 2025/09/18 10:38:00 coverage filter: mark_reg_unknown: [mark_reg_unknown] 2025/09/18 10:38:00 coverage filter: mark_subprog_changes_pkt_data: [mark_subprog_changes_pkt_data] 2025/09/18 10:38:00 coverage filter: mark_subprog_might_sleep: [mark_subprog_might_sleep] 2025/09/18 10:38:00 coverage filter: may_update_sockmap: [may_update_sockmap] 2025/09/18 10:38:00 coverage filter: maybe_widen_reg: [maybe_widen_reg] 2025/09/18 10:38:00 coverage filter: opt_hard_wire_dead_code_branches: [opt_hard_wire_dead_code_branches] 2025/09/18 10:38:00 coverage filter: opt_remove_dead_code: [opt_remove_dead_code] 2025/09/18 10:38:00 coverage filter: opt_remove_nops: [opt_remove_nops] 2025/09/18 10:38:00 coverage filter: opt_subreg_zext_lo32_rnd_hi32: [opt_subreg_zext_lo32_rnd_hi32] 2025/09/18 10:38:00 coverage filter: print_bpf_insn: [print_bpf_insn] 2025/09/18 10:38:00 coverage filter: print_insn_state: [print_insn_state] 2025/09/18 10:38:00 coverage filter: print_reg_state: [print_reg_state] 2025/09/18 10:38:00 coverage filter: print_verifier_state: [print_verifier_state] 2025/09/18 10:38:00 coverage filter: process_bpf_exit_full: [process_bpf_exit_full] 2025/09/18 10:38:00 coverage filter: process_dynptr_func: [process_dynptr_func] 2025/09/18 10:38:00 coverage filter: process_irq_flag: [process_irq_flag] 2025/09/18 10:38:00 coverage filter: process_iter_arg: [process_iter_arg] 2025/09/18 10:38:00 coverage filter: process_iter_next_call: [process_iter_next_call] 2025/09/18 10:38:00 coverage filter: process_kf_arg_ptr_to_btf_id: [process_kf_arg_ptr_to_btf_id] 2025/09/18 10:38:00 coverage filter: process_kptr_func: [process_kptr_func] 2025/09/18 10:38:00 coverage filter: process_spin_lock: [process_spin_lock] 2025/09/18 10:38:00 coverage filter: process_timer_func: [process_timer_func] 2025/09/18 10:38:00 coverage filter: process_wq_func: [process_wq_func] 2025/09/18 10:38:00 coverage filter: propagate_liveness: [propagate_liveness] 2025/09/18 10:38:00 coverage filter: propagate_precision: [propagate_precision] 2025/09/18 10:38:00 coverage filter: push_callback_call: [push_callback_call] 2025/09/18 10:38:00 coverage filter: push_insn: [push_insn] 2025/09/18 10:38:00 coverage filter: push_jmp_history: [push_jmp_history] 2025/09/18 10:38:00 coverage filter: push_stack: [push_stack] 2025/09/18 10:38:00 coverage filter: record_func_key: [record_func_key] 2025/09/18 10:38:00 coverage filter: record_func_map: [record_func_map] 2025/09/18 10:38:00 coverage filter: ref_convert_owning_non_owning: [ref_convert_owning_non_owning] 2025/09/18 10:38:00 coverage filter: ref_set_non_owning: [ref_set_non_owning] 2025/09/18 10:38:00 coverage filter: reg_bounds_sanity_check: [reg_bounds_sanity_check] 2025/09/18 10:38:00 coverage filter: reg_set_min_max: [reg_set_min_max] 2025/09/18 10:38:00 coverage filter: reg_type_str: [reg_type_str] 2025/09/18 10:38:00 coverage filter: regsafe: [regsafe] 2025/09/18 10:38:00 coverage filter: release_reference: [release_reference release_reference_nomark release_reference_state release_references] 2025/09/18 10:38:00 coverage filter: resolve_pseudo_ldimm64: [resolve_pseudo_ldimm64] 2025/09/18 10:38:00 coverage filter: sanitize_check_bounds: [sanitize_check_bounds] 2025/09/18 10:38:00 coverage filter: sanitize_dead_code: [sanitize_dead_code] 2025/09/18 10:38:00 coverage filter: sanitize_err: [sanitize_err] 2025/09/18 10:38:00 coverage filter: sanitize_ptr_alu: [sanitize_ptr_alu] 2025/09/18 10:38:00 coverage filter: sanitize_speculative_path: [sanitize_speculative_path] 2025/09/18 10:38:00 coverage filter: save_aux_ptr_type: [save_aux_ptr_type] 2025/09/18 10:38:00 coverage filter: scalar_reg_for_stack: [scalar_reg_for_stack] 2025/09/18 10:38:00 coverage filter: set_find_vma_callback_state: [set_find_vma_callback_state] 2025/09/18 10:38:00 coverage filter: set_loop_callback_state: [set_loop_callback_state] 2025/09/18 10:38:00 coverage filter: set_map_elem_callback_state: [set_map_elem_callback_state] 2025/09/18 10:38:00 coverage filter: set_rbtree_add_callback_state: [set_rbtree_add_callback_state] 2025/09/18 10:38:00 coverage filter: set_timer_callback_state: [set_timer_callback_state] 2025/09/18 10:38:00 coverage filter: set_user_ringbuf_callback_state: [set_user_ringbuf_callback_state] 2025/09/18 10:38:00 coverage filter: setup_func_entry: [setup_func_entry] 2025/09/18 10:38:00 coverage filter: specialize_kfunc: [specialize_kfunc] 2025/09/18 10:38:00 coverage filter: stack_slot_obj_get_spi: [stack_slot_obj_get_spi] 2025/09/18 10:38:00 coverage filter: states_equal: [states_equal] 2025/09/18 10:38:00 coverage filter: trace_call_bpf: [trace_call_bpf] 2025/09/18 10:38:00 coverage filter: unmark_stack_slots_dynptr: [unmark_stack_slots_dynptr] 2025/09/18 10:38:00 coverage filter: unmark_stack_slots_iter: [unmark_stack_slots_iter] 2025/09/18 10:38:00 coverage filter: update_loop_inline_state: [update_loop_inline_state] 2025/09/18 10:38:00 coverage filter: verbose: [__bpf_trace_net_dev_rx_verbose_template console_verbose perf_trace_net_dev_rx_verbose_template print_tainted_verbose trace_event_raw_event_net_dev_rx_verbose_template trace_raw_output_net_dev_rx_verbose_template verbose verbose_invalid_scalar verbose_linfo] 2025/09/18 10:38:00 coverage filter: verbose_invalid_scalar: [] 2025/09/18 10:38:00 coverage filter: verbose_linfo: [] 2025/09/18 10:38:00 coverage filter: verifier_remove_insns: [verifier_remove_insns] 2025/09/18 10:38:00 coverage filter: visit_func_call_insn: [visit_func_call_insn] 2025/09/18 10:38:00 coverage filter: widen_imprecise_scalars: [widen_imprecise_scalars] 2025/09/18 10:38:00 coverage filter: arch/x86/net/bpf_jit_comp.c: [arch/x86/net/bpf_jit_comp.c] 2025/09/18 10:38:00 coverage filter: include/linux/bpf.h: [] 2025/09/18 10:38:00 coverage filter: include/linux/bpf_types.h: [] 2025/09/18 10:38:00 coverage filter: include/linux/bpf_verifier.h: [] 2025/09/18 10:38:00 coverage filter: include/uapi/linux/bpf.h: [] 2025/09/18 10:38:00 coverage filter: kernel/bpf/Makefile: [] 2025/09/18 10:38:00 coverage filter: kernel/bpf/bpf_insn_array.c: [kernel/bpf/bpf_insn_array.c] 2025/09/18 10:38:00 coverage filter: kernel/bpf/core.c: [kernel/bpf/core.c] 2025/09/18 10:38:00 coverage filter: kernel/bpf/disasm.c: [kernel/bpf/disasm.c] 2025/09/18 10:38:00 coverage filter: kernel/bpf/log.c: [kernel/bpf/log.c] 2025/09/18 10:38:00 coverage filter: kernel/bpf/syscall.c: [kernel/bpf/syscall.c] 2025/09/18 10:38:00 coverage filter: kernel/bpf/verifier.c: [kernel/bpf/verifier.c] 2025/09/18 10:38:00 coverage filter: tools/bpf/bpftool/Documentation/bpftool-map.rst: [] 2025/09/18 10:38:00 coverage filter: tools/bpf/bpftool/map.c: [] 2025/09/18 10:38:00 coverage filter: tools/include/uapi/linux/bpf.h: [] 2025/09/18 10:38:00 coverage filter: tools/lib/bpf/libbpf.c: [] 2025/09/18 10:38:00 coverage filter: tools/lib/bpf/libbpf_probes.c: [] 2025/09/18 10:38:00 coverage filter: tools/lib/bpf/linker.c: [] 2025/09/18 10:38:00 coverage filter: tools/testing/selftests/bpf/Makefile: [] 2025/09/18 10:38:00 coverage filter: tools/testing/selftests/bpf/prog_tests/bpf_gotox.c: [] 2025/09/18 10:38:00 coverage filter: tools/testing/selftests/bpf/prog_tests/bpf_insn_array.c: [] 2025/09/18 10:38:00 coverage filter: tools/testing/selftests/bpf/progs/bpf_gotox.c: [] 2025/09/18 10:38:00 area "symbols": 16279 PCs in the cover filter 2025/09/18 10:38:00 area "files": 18393 PCs in the cover filter 2025/09/18 10:38:00 area "": 0 PCs in the cover filter 2025/09/18 10:38:00 executor cover filter: 0 PCs 2025/09/18 10:38:02 machine check: disabled the following syscalls: socket$hf : socket$hf(0x13, 0x2, 0x0) failed: address family not supported by protocol socket$inet6_dccp : socket$inet6_dccp(0xa, 0x6, 0x0) failed: socket type not supported socket$inet_dccp : socket$inet_dccp(0x2, 0x6, 0x0) failed: socket type not supported socket$vsock_dgram : socket$vsock_dgram(0x28, 0x2, 0x0) failed: no such device transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] recvmsg$hf : sock_hf [socket$hf] recvmsg$inet_nvme : nvme_sock [syz_socket_connect_nvme_tcp] sendmsg$802154_dgram : sock_802154_dgram [syz_init_net_socket$802154_dgram] sendmsg$802154_raw : sock_802154_raw [syz_init_net_socket$802154_raw] sendmsg$BATADV_CMD_GET_BLA_BACKBONE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_BLA_CLAIM : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_DAT_CACHE : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_GATEWAYS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MCAST_FLAGS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_NEIGHBORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ORIGINATORS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_ROUTING_ALGOS : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_GET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_HARDIF : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_MESH : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_SET_VLAN : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$BATADV_CMD_TP_METER_CANCEL : genl_batadv_family_id [syz_genetlink_get_family_id$batadv] sendmsg$DEVLINK_CMD_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_SPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_PORT_UNSPLIT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_DEL : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_NEW : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RATE_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_RELOAD : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_GROUP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_GET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_POLICER_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$DEVLINK_CMD_TRAP_SET : genl_devlink_family_id [syz_genetlink_get_family_id$devlink] sendmsg$ETHTOOL_MSG_CHANNELS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_CHANNELS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_COALESCE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_DEBUG_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_EEE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_FEATURES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKINFO_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKMODES_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_LINKSTATE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PAUSE_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_RINGS_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_STRSET_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_TSINFO_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_GET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$ETHTOOL_MSG_WOL_SET : genl_ethtool_family_id [syz_genetlink_get_family_id$ethtool] sendmsg$FOU_CMD_ADD : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_DEL : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$FOU_CMD_GET : genl_fou_family_id [syz_genetlink_get_family_id$fou] sendmsg$GTP_CMD_DELPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_ECHOREQ : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_GETPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$GTP_CMD_NEWPDP : genl_gtp_family_id [syz_genetlink_get_family_id$gtp] sendmsg$IEEE802154_ADD_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_ASSOCIATE_RESP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_DISASSOCIATE_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_IFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LIST_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_GETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_LLSEC_SETPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SCAN_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_SET_MACPARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IEEE802154_START_REQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$IPVS_CMD_DEL_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_DEL_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_FLUSH : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_GET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DAEMON : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_NEW_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_CONFIG : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_DEST : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_INFO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_SET_SERVICE : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$IPVS_CMD_ZERO : genl_ipvs_family_id [syz_genetlink_get_family_id$ipvs] sendmsg$L2TP_CMD_NOOP : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_SESSION_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_CREATE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_DELETE : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_GET : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$L2TP_CMD_TUNNEL_MODIFY : genl_l2tp_family_id [syz_genetlink_get_family_id$l2tp] sendmsg$MPTCP_PM_CMD_ADD_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_ANNOUNCE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_DEL_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_ADDR : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_GET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_REMOVE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_FLAGS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SET_LIMITS : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY : genl_mptcp_family_id [syz_genetlink_get_family_id$mptcp] sendmsg$NBD_CMD_CONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_DISCONNECT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_RECONFIGURE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NBD_CMD_STATUS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_START : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NET_DM_CMD_STOP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEACTIVATE_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEP_LINK_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_DOWN : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DEV_UP : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_DISABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_ENABLE_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_FW_DOWNLOAD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_DEVICE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_SE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_GET_TARGET : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_GET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SDREQ : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_LLC_SET_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_SE_IO : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_START_POLL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NFC_CMD_VENDOR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL80211_CMD_ABORT_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ADD_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_ASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_AUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CONTROL_PORT_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEAUTHENTICATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_NAN_FUNCTION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DEL_TX_TS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISASSOCIATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_DISCONNECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_EXTERNAL_AUTH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FLUSH_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_MPP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_SURVEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_GET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_JOIN_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_IBSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_MESH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_LEAVE_OCB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NEW_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_NOTIFY_RADAR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PEER_MEASUREMENT_START : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_CLIENT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_PROBE_MESH_LINK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RADAR_DETECT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_BEACONS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REGISTER_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_RELOAD_REGDB : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_REQ_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BEACON : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_BSS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CHANNEL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_COALESCE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_CQM : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_INTERFACE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_KEY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MAC_ACL : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MCAST_RATE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MESH_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MPATH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_NOACK_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_PMKSA : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_POWER_SAVE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_QOS_MAP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_STATION : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TID_CONFIG : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WDS_PEER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WIPHY_NETNS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_SET_WOWLAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_START_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_AP : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_NAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_P2P_DEVICE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_STOP_SCHED_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH: nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_MGMT : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TDLS_OPER : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TESTMODE : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_TRIGGER_SCAN : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UNEXPECTED_FRAME : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_FT_IES : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_UPDATE_OWE_INFO : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL80211_CMD_VENDOR : nl80211_family_id [syz_genetlink_get_family_id$nl80211] sendmsg$NL802154_CMD_DEL_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_DEL_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_GET_WPAN_PHY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_INTERFACE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEV : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_DEVKEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_KEY : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_NEW_SEC_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CCA_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_CHANNEL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_LBT_MODE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_PAN_ID : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SEC_PARAMS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_SHORT_ADDR : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_TX_POWER : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CALIPSO_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_CIPSOV4_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_ADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTALL : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_LISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_PROTOCOLS : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_REMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_MGMT_C_VERSION : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_ACCEPT : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_LIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADD : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICADDDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLIST : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICLISTDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVE : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF : sock_nl_generic_init [syz_init_net_socket$nl_generic] sendmsg$SEG6_CMD_DUMPHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_GET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SETHMAC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SEG6_CMD_SET_TUNSRC : genl_seg6_family_id [syz_genetlink_get_family_id$SEG6] sendmsg$SMC_PNETID_ADD : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_DEL : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_FLUSH : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$SMC_PNETID_GET : genl_smc_family_id [syz_genetlink_get_family_id$smc] sendmsg$TEAM_CMD_NOOP : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_OPTIONS_SET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TEAM_CMD_PORT_LIST_GET : genl_team_family_id [syz_genetlink_get_family_id$team] sendmsg$TIPC_CMD_DISABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_ENABLE_BEARER : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_BEARER_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_LINKS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MAX_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_MEDIA_NAMES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_NODES : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_GET_REMOTE_MNG : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_RESET_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_PRI : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_TOL : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_LINK_WINDOW : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NETID : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SET_NODE_ADDR : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_LINK_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_NAME_TABLE : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_PORTS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_CMD_SHOW_STATS : genl_tipc_family_id [syz_genetlink_get_family_id$tipc] sendmsg$TIPC_NL_BEARER_ADD : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_DISABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_ENABLE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_BEARER_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_FLUSH : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_KEY_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_RESET_STATS : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_LINK_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MEDIA_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_PEER_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_MON_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NAME_TABLE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NET_SET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_NODE_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PEER_REMOVE : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_PUBL_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_SOCK_GET : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$TIPC_NL_UDP_GET_REMOTEIP : genl_tipc2_family_id [syz_genetlink_get_family_id$tipc2] sendmsg$WG_CMD_GET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$WG_CMD_SET_DEVICE : genl_wireguard_family_id [syz_genetlink_get_family_id$wireguard] sendmsg$alg : sock_algconn [accept$alg accept4$alg] sendmsg$can_bcm : timespec [clock_gettime] sendmsg$hf : sock_hf [socket$hf] sendmsg$nfc_llcp : sock_nfc_llcp [accept$nfc_llcp accept4$nfc_llcp syz_init_net_socket$nfc_llcp] sendmsg$nl_route : ifindex_vcan [ioctl$ifreq_SIOCGIFINDEX_vcan] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 311/8054 2025/09/18 10:38:02 new: machine check complete 2025/09/18 10:38:02 new: adding 30058 seeds 2025/09/18 10:39:01 base crash "WARNING in xfrm_state_fini" is already known 2025/09/18 10:39:01 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:39:07 base crash: WARNING in xfrm_state_fini 2025/09/18 10:39:50 runner 8 connected 2025/09/18 10:39:59 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:40:03 runner 2 connected 2025/09/18 10:40:05 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:40:28 patched crashed: KFENCE: use-after-free read in xfrm_alloc_spi [need repro = true] 2025/09/18 10:40:28 scheduled a reproduction of 'KFENCE: use-after-free read in xfrm_alloc_spi' 2025/09/18 10:40:33 base crash "KASAN: slab-use-after-free Read in xfrm_alloc_spi" is already known 2025/09/18 10:40:33 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 10:40:35 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 10:40:48 runner 5 connected 2025/09/18 10:40:53 runner 7 connected 2025/09/18 10:41:02 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/18 10:41:02 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 10:41:17 runner 1 connected 2025/09/18 10:41:24 runner 3 connected 2025/09/18 10:41:31 runner 3 connected 2025/09/18 10:41:41 base crash "unregister_netdevice: waiting for DEV to become free" is already known 2025/09/18 10:41:41 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 10:41:50 runner 2 connected 2025/09/18 10:42:00 STAT { "buffer too small": 0, "candidate triage jobs": 45, "candidates": 24566, "comps overflows": 0, "corpus": 5389, "corpus [files]": 7041, "corpus [symbols]": 4614, "cover overflows": 927, "coverage": 75476, "distributor delayed": 6011, "distributor undelayed": 6011, "distributor violated": 1, "exec candidate": 5492, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 10, "exec seeds": 0, "exec smash": 0, "exec total [base]": 10547, "exec total [new]": 24641, "exec triage": 17103, "executor restarts [base]": 57, "executor restarts [new]": 112, "fault jobs": 0, "fuzzer jobs": 45, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 0, "max signal": 76652, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 5492, "no exec duration": 31657000000, "no exec requests": 89, "pending": 1, "prog exec time": 230, "reproducing": 0, "rpc recv": 1621392448, "rpc sent": 58580864, "signal": 73616, "smash jobs": 0, "triage jobs": 0, "vm output": 1198350, "vm restarts [base]": 6, "vm restarts [new]": 16 } 2025/09/18 10:42:09 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 10:42:30 runner 6 connected 2025/09/18 10:42:51 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:42:51 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:42:55 base crash "INFO: task hung in rdma_dev_change_netns" is already known 2025/09/18 10:42:55 patched crashed: INFO: task hung in rdma_dev_change_netns [need repro = false] 2025/09/18 10:43:02 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:43:02 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:43:03 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:43:06 runner 2 connected 2025/09/18 10:43:17 base crash: lost connection to test machine 2025/09/18 10:43:38 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:43:42 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:43:44 runner 0 connected 2025/09/18 10:43:47 runner 4 connected 2025/09/18 10:43:50 runner 1 connected 2025/09/18 10:43:53 runner 2 connected 2025/09/18 10:43:59 base crash: WARNING in xfrm_state_fini 2025/09/18 10:44:07 runner 3 connected 2025/09/18 10:44:26 runner 8 connected 2025/09/18 10:44:31 runner 5 connected 2025/09/18 10:44:42 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:44:49 runner 1 connected 2025/09/18 10:45:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:45:23 base crash: WARNING in xfrm_state_fini 2025/09/18 10:45:38 runner 6 connected 2025/09/18 10:45:40 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/18 10:45:40 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 10:45:45 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 10:45:53 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/18 10:45:53 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 10:46:00 runner 3 connected 2025/09/18 10:46:14 runner 2 connected 2025/09/18 10:46:20 base crash: WARNING in xfrm_state_fini 2025/09/18 10:46:34 runner 4 connected 2025/09/18 10:46:36 runner 2 connected 2025/09/18 10:46:38 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/18 10:46:38 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 10:46:42 runner 8 connected 2025/09/18 10:47:00 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 10:47:00 STAT { "buffer too small": 0, "candidate triage jobs": 44, "candidates": 19381, "comps overflows": 0, "corpus": 10479, "corpus [files]": 12119, "corpus [symbols]": 7754, "cover overflows": 2065, "coverage": 87831, "distributor delayed": 12573, "distributor undelayed": 12572, "distributor violated": 14, "exec candidate": 10677, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 28, "exec seeds": 0, "exec smash": 0, "exec total [base]": 21967, "exec total [new]": 53929, "exec triage": 33133, "executor restarts [base]": 90, "executor restarts [new]": 197, "fault jobs": 0, "fuzzer jobs": 44, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 0, "max signal": 89007, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 10677, "no exec duration": 37454000000, "no exec requests": 120, "pending": 1, "prog exec time": 202, "reproducing": 0, "rpc recv": 2979043352, "rpc sent": 122635768, "signal": 85722, "smash jobs": 0, "triage jobs": 0, "vm output": 2572842, "vm restarts [base]": 10, "vm restarts [new]": 28 } 2025/09/18 10:47:01 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/18 10:47:01 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 10:47:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:47:11 runner 0 connected 2025/09/18 10:47:23 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:47:23 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:47:28 runner 9 connected 2025/09/18 10:47:31 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 10:47:33 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:47:33 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:47:48 runner 3 connected 2025/09/18 10:47:49 runner 1 connected 2025/09/18 10:47:59 runner 5 connected 2025/09/18 10:48:07 base crash: WARNING in xfrm_state_fini 2025/09/18 10:48:12 runner 3 connected 2025/09/18 10:48:15 base crash "KASAN: slab-use-after-free Read in __xfrm_state_lookup" is already known 2025/09/18 10:48:15 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 10:48:20 runner 4 connected 2025/09/18 10:48:22 runner 0 connected 2025/09/18 10:48:29 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 10:48:34 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:48:50 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 10:48:57 runner 0 connected 2025/09/18 10:49:04 runner 6 connected 2025/09/18 10:49:18 runner 3 connected 2025/09/18 10:49:23 runner 7 connected 2025/09/18 10:49:26 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 10:49:39 runner 5 connected 2025/09/18 10:49:42 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/18 10:49:50 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:50:12 base crash "KASAN: slab-use-after-free Write in __xfrm_state_delete" is already known 2025/09/18 10:50:12 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/09/18 10:50:16 runner 3 connected 2025/09/18 10:50:31 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:50:31 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:50:39 runner 9 connected 2025/09/18 10:50:40 runner 1 connected 2025/09/18 10:50:49 base crash: WARNING in xfrm_state_fini 2025/09/18 10:51:02 runner 0 connected 2025/09/18 10:51:19 runner 7 connected 2025/09/18 10:51:46 runner 2 connected 2025/09/18 10:51:48 base crash: WARNING in xfrm_state_fini 2025/09/18 10:51:51 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:51:51 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:52:00 STAT { "buffer too small": 0, "candidate triage jobs": 3, "candidates": 16942, "comps overflows": 0, "corpus": 12830, "corpus [files]": 14325, "corpus [symbols]": 9072, "cover overflows": 3331, "coverage": 91780, "distributor delayed": 16021, "distributor undelayed": 16021, "distributor violated": 19, "exec candidate": 13116, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 54, "exec seeds": 0, "exec smash": 0, "exec total [base]": 33848, "exec total [new]": 84433, "exec triage": 40895, "executor restarts [base]": 127, "executor restarts [new]": 285, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 0, "max signal": 93636, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13116, "no exec duration": 40218000000, "no exec requests": 149, "pending": 1, "prog exec time": 238, "reproducing": 0, "rpc recv": 4108142588, "rpc sent": 187863568, "signal": 89329, "smash jobs": 0, "triage jobs": 0, "vm output": 3965100, "vm restarts [base]": 16, "vm restarts [new]": 41 } 2025/09/18 10:52:23 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:52:37 runner 3 connected 2025/09/18 10:52:41 runner 6 connected 2025/09/18 10:53:02 base crash: WARNING in xfrm_state_fini 2025/09/18 10:53:03 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 10:53:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:53:13 runner 8 connected 2025/09/18 10:53:15 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:53:25 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:53:25 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:53:43 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:53:50 runner 0 connected 2025/09/18 10:53:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:53:59 runner 0 connected 2025/09/18 10:54:00 runner 7 connected 2025/09/18 10:54:04 runner 2 connected 2025/09/18 10:54:14 runner 3 connected 2025/09/18 10:54:32 runner 1 connected 2025/09/18 10:54:47 runner 4 connected 2025/09/18 10:54:55 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:55:06 base crash "WARNING in reg_bounds_sanity_check" is already known 2025/09/18 10:55:06 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:55:23 base crash: WARNING in reg_bounds_sanity_check 2025/09/18 10:55:24 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 10:55:38 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 10:55:44 runner 5 connected 2025/09/18 10:55:55 runner 3 connected 2025/09/18 10:56:11 runner 9 connected 2025/09/18 10:56:12 runner 0 connected 2025/09/18 10:56:13 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 10:56:17 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:56:28 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/18 10:56:29 runner 6 connected 2025/09/18 10:56:33 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 10:56:40 base crash: WARNING in xfrm_state_fini 2025/09/18 10:56:56 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:57:00 STAT { "buffer too small": 0, "candidate triage jobs": 3, "candidates": 10278, "comps overflows": 0, "corpus": 12948, "corpus [files]": 14435, "corpus [symbols]": 9138, "cover overflows": 4584, "coverage": 92064, "distributor delayed": 16453, "distributor undelayed": 16453, "distributor violated": 26, "exec candidate": 19780, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 65, "exec seeds": 0, "exec smash": 0, "exec total [base]": 46186, "exec total [new]": 112641, "exec triage": 41863, "executor restarts [base]": 162, "executor restarts [new]": 359, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 94126, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13349, "no exec duration": 41974000000, "no exec requests": 172, "pending": 1, "prog exec time": 165, "reproducing": 0, "rpc recv": 4919416712, "rpc sent": 250380384, "signal": 89583, "smash jobs": 0, "triage jobs": 0, "vm output": 5181574, "vm restarts [base]": 19, "vm restarts [new]": 53 } 2025/09/18 10:57:03 runner 0 connected 2025/09/18 10:57:07 runner 1 connected 2025/09/18 10:57:18 runner 1 connected 2025/09/18 10:57:23 runner 5 connected 2025/09/18 10:57:28 runner 3 connected 2025/09/18 10:57:31 patched crashed: WARNING in reg_bounds_sanity_check [need repro = false] 2025/09/18 10:57:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:57:45 runner 3 connected 2025/09/18 10:58:05 base crash: WARNING in xfrm_state_fini 2025/09/18 10:58:09 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:58:28 runner 0 connected 2025/09/18 10:58:30 triaged 94.3% of the corpus 2025/09/18 10:58:30 starting bug reproductions 2025/09/18 10:58:30 starting bug reproductions (max 10 VMs, 7 repros) 2025/09/18 10:58:30 start reproducing 'KFENCE: use-after-free read in xfrm_alloc_spi' 2025/09/18 10:58:30 failed to recv *flatrpc.InfoRequestRawT: EOF 2025/09/18 10:58:33 runner 8 connected 2025/09/18 10:58:54 runner 2 connected 2025/09/18 10:58:59 runner 7 connected 2025/09/18 10:59:00 triaged 100.0% of the corpus 2025/09/18 10:59:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:59:23 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 10:59:37 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/18 10:59:59 base crash "KASAN: slab-use-after-free Write in __xfrm_state_delete" is already known 2025/09/18 10:59:59 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/09/18 11:00:03 runner 6 connected 2025/09/18 11:00:12 runner 5 connected 2025/09/18 11:00:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:00:27 runner 0 connected 2025/09/18 11:00:33 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:00:47 runner 9 connected 2025/09/18 11:01:03 runner 2 connected 2025/09/18 11:01:16 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:01:22 runner 8 connected 2025/09/18 11:01:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:01:34 base crash: WARNING in xfrm_state_fini 2025/09/18 11:01:38 base crash: lost connection to test machine 2025/09/18 11:02:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 0, "corpus": 12963, "corpus [files]": 14452, "corpus [symbols]": 9151, "cover overflows": 5534, "coverage": 92110, "distributor delayed": 16649, "distributor undelayed": 16649, "distributor violated": 26, "exec candidate": 30058, "exec collide": 2237, "exec fuzz": 4234, "exec gen": 226, "exec hints": 87, "exec inject": 0, "exec minimize": 36, "exec retries": 80, "exec seeds": 12, "exec smash": 80, "exec total [base]": 55721, "exec total [new]": 130226, "exec triage": 42243, "executor restarts [base]": 193, "executor restarts [new]": 423, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 1, "max signal": 94500, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 18, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13446, "no exec duration": 43159000000, "no exec requests": 182, "pending": 0, "prog exec time": 383, "reproducing": 1, "rpc recv": 5694840480, "rpc sent": 337925376, "signal": 89623, "smash jobs": 0, "triage jobs": 1, "vm output": 6396606, "vm restarts [base]": 23, "vm restarts [new]": 65 } 2025/09/18 11:02:12 runner 6 connected 2025/09/18 11:02:14 runner 7 connected 2025/09/18 11:02:23 runner 2 connected 2025/09/18 11:02:27 runner 0 connected 2025/09/18 11:02:32 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/18 11:02:59 base crash: INFO: rcu detected stall in futex 2025/09/18 11:03:11 patched crashed: INFO: rcu detected stall in task_work_add [need repro = false] 2025/09/18 11:03:22 runner 3 connected 2025/09/18 11:03:24 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:03:48 runner 1 connected 2025/09/18 11:03:50 base crash: lost connection to test machine 2025/09/18 11:04:01 runner 3 connected 2025/09/18 11:04:14 runner 4 connected 2025/09/18 11:04:24 patched crashed: INFO: rcu detected stall in perf_event_open [need repro = false] 2025/09/18 11:04:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:04:39 runner 0 connected 2025/09/18 11:05:12 runner 7 connected 2025/09/18 11:05:20 runner 9 connected 2025/09/18 11:05:45 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:06:11 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:06:26 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:06:33 runner 2 connected 2025/09/18 11:06:43 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:07:00 runner 7 connected 2025/09/18 11:07:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 6, "corpus": 12979, "corpus [files]": 14470, "corpus [symbols]": 9158, "cover overflows": 6281, "coverage": 92128, "distributor delayed": 16835, "distributor undelayed": 16833, "distributor violated": 26, "exec candidate": 30058, "exec collide": 5689, "exec fuzz": 10635, "exec gen": 538, "exec hints": 1875, "exec inject": 0, "exec minimize": 429, "exec retries": 91, "exec seeds": 66, "exec smash": 530, "exec total [base]": 62784, "exec total [new]": 143427, "exec triage": 42591, "executor restarts [base]": 225, "executor restarts [new]": 473, "fault jobs": 0, "fuzzer jobs": 12, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 5, "hints jobs": 7, "max signal": 94713, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 235, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13563, "no exec duration": 43184000000, "no exec requests": 184, "pending": 0, "prog exec time": 301, "reproducing": 1, "rpc recv": 6384971000, "rpc sent": 441710160, "signal": 89640, "smash jobs": 0, "triage jobs": 5, "vm output": 7680089, "vm restarts [base]": 28, "vm restarts [new]": 73 } 2025/09/18 11:07:16 base crash: WARNING in xfrm_state_fini 2025/09/18 11:07:16 runner 5 connected 2025/09/18 11:07:18 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 11:07:32 runner 3 connected 2025/09/18 11:07:52 patched crashed: INFO: rcu detected stall in smp_call_function [need repro = false] 2025/09/18 11:07:53 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:08:04 runner 3 connected 2025/09/18 11:08:09 runner 2 connected 2025/09/18 11:08:41 runner 8 connected 2025/09/18 11:08:42 runner 9 connected 2025/09/18 11:09:23 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:10:04 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 11:10:12 runner 4 connected 2025/09/18 11:10:45 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:10:46 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:10:49 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:10:52 runner 2 connected 2025/09/18 11:11:21 base crash "WARNING in xfrm6_tunnel_net_exit" is already known 2025/09/18 11:11:21 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/18 11:11:24 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 11:11:34 runner 5 connected 2025/09/18 11:11:35 runner 8 connected 2025/09/18 11:11:39 runner 6 connected 2025/09/18 11:12:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 10, "corpus": 13006, "corpus [files]": 14498, "corpus [symbols]": 9170, "cover overflows": 7177, "coverage": 92157, "distributor delayed": 17006, "distributor undelayed": 17006, "distributor violated": 28, "exec candidate": 30058, "exec collide": 9034, "exec fuzz": 17276, "exec gen": 885, "exec hints": 5262, "exec inject": 0, "exec minimize": 1045, "exec retries": 103, "exec seeds": 150, "exec smash": 1173, "exec total [base]": 71558, "exec total [new]": 158879, "exec triage": 42963, "executor restarts [base]": 253, "executor restarts [new]": 522, "fault jobs": 0, "fuzzer jobs": 14, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 7, "max signal": 96036, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 535, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13687, "no exec duration": 43184000000, "no exec requests": 184, "pending": 0, "prog exec time": 369, "reproducing": 1, "rpc recv": 7148929848, "rpc sent": 555116376, "signal": 89668, "smash jobs": 2, "triage jobs": 5, "vm output": 8998460, "vm restarts [base]": 31, "vm restarts [new]": 81 } 2025/09/18 11:12:10 base crash: WARNING in xfrm_state_fini 2025/09/18 11:12:11 runner 9 connected 2025/09/18 11:12:12 runner 3 connected 2025/09/18 11:12:16 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/18 11:12:31 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:12:58 runner 3 connected 2025/09/18 11:13:06 runner 0 connected 2025/09/18 11:13:17 patched crashed: INFO: rcu detected stall in rtnl_newlink [need repro = false] 2025/09/18 11:13:19 runner 8 connected 2025/09/18 11:13:42 base crash: INFO: rcu detected stall in rtnl_newlink 2025/09/18 11:13:47 base crash "KASAN: slab-use-after-free Write in __xfrm_state_delete" is already known 2025/09/18 11:13:47 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/09/18 11:14:07 runner 4 connected 2025/09/18 11:14:23 patched crashed: INFO: rcu detected stall in perf_event_open [need repro = false] 2025/09/18 11:14:26 base crash: lost connection to test machine 2025/09/18 11:14:30 runner 1 connected 2025/09/18 11:14:35 base crash: lost connection to test machine 2025/09/18 11:14:36 runner 7 connected 2025/09/18 11:15:13 runner 9 connected 2025/09/18 11:15:15 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:15:16 runner 2 connected 2025/09/18 11:15:25 runner 3 connected 2025/09/18 11:15:58 base crash: lost connection to test machine 2025/09/18 11:16:06 runner 4 connected 2025/09/18 11:16:15 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:16:46 runner 3 connected 2025/09/18 11:16:55 base crash: WARNING in xfrm_state_fini 2025/09/18 11:17:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 16, "corpus": 13013, "corpus [files]": 14506, "corpus [symbols]": 9175, "cover overflows": 8227, "coverage": 92171, "distributor delayed": 17123, "distributor undelayed": 17123, "distributor violated": 29, "exec candidate": 30058, "exec collide": 13147, "exec fuzz": 24980, "exec gen": 1329, "exec hints": 7812, "exec inject": 0, "exec minimize": 1228, "exec retries": 108, "exec seeds": 174, "exec smash": 1368, "exec total [base]": 77653, "exec total [new]": 174328, "exec triage": 43194, "executor restarts [base]": 277, "executor restarts [new]": 565, "fault jobs": 0, "fuzzer jobs": 10, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 7, "max signal": 96274, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 623, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13761, "no exec duration": 43184000000, "no exec requests": 184, "pending": 0, "prog exec time": 295, "reproducing": 1, "rpc recv": 7814871888, "rpc sent": 663481224, "signal": 89681, "smash jobs": 2, "triage jobs": 1, "vm output": 10176241, "vm restarts [base]": 37, "vm restarts [new]": 88 } 2025/09/18 11:17:04 runner 5 connected 2025/09/18 11:17:14 base crash "general protection fault in __xfrm_state_insert" is already known 2025/09/18 11:17:14 patched crashed: general protection fault in __xfrm_state_insert [need repro = false] 2025/09/18 11:17:30 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:17:31 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:17:38 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:17:44 runner 1 connected 2025/09/18 11:18:04 runner 6 connected 2025/09/18 11:18:06 base crash: lost connection to test machine 2025/09/18 11:18:16 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 11:18:20 runner 7 connected 2025/09/18 11:18:21 runner 2 connected 2025/09/18 11:18:27 runner 3 connected 2025/09/18 11:18:45 base crash: general protection fault in __xfrm_state_insert 2025/09/18 11:18:55 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:18:55 runner 2 connected 2025/09/18 11:19:04 runner 3 connected 2025/09/18 11:19:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:19:36 runner 0 connected 2025/09/18 11:19:44 runner 5 connected 2025/09/18 11:19:50 base crash: WARNING in xfrm_state_fini 2025/09/18 11:20:01 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:20:10 runner 4 connected 2025/09/18 11:20:20 patched crashed: general protection fault in __xfrm_state_insert [need repro = false] 2025/09/18 11:20:36 patched crashed: INFO: rcu detected stall in perf_event_open [need repro = false] 2025/09/18 11:20:39 runner 1 connected 2025/09/18 11:20:50 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:20:50 runner 3 connected 2025/09/18 11:20:59 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:21:05 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:21:07 base crash: lost connection to test machine 2025/09/18 11:21:08 base crash: lost connection to test machine 2025/09/18 11:21:09 runner 2 connected 2025/09/18 11:21:13 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:21:24 runner 9 connected 2025/09/18 11:21:41 runner 8 connected 2025/09/18 11:21:47 runner 7 connected 2025/09/18 11:21:54 runner 5 connected 2025/09/18 11:21:56 runner 3 connected 2025/09/18 11:21:57 runner 0 connected 2025/09/18 11:21:58 patched crashed: INFO: rcu detected stall in sys_socket [need repro = false] 2025/09/18 11:22:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 25, "corpus": 13019, "corpus [files]": 14512, "corpus [symbols]": 9178, "cover overflows": 9279, "coverage": 92180, "distributor delayed": 17213, "distributor undelayed": 17213, "distributor violated": 29, "exec candidate": 30058, "exec collide": 16299, "exec fuzz": 31117, "exec gen": 1658, "exec hints": 10383, "exec inject": 0, "exec minimize": 1383, "exec retries": 115, "exec seeds": 192, "exec smash": 1555, "exec total [base]": 84540, "exec total [new]": 187070, "exec triage": 43380, "executor restarts [base]": 303, "executor restarts [new]": 619, "fault jobs": 0, "fuzzer jobs": 8, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 6, "max signal": 96396, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 700, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13821, "no exec duration": 43603000000, "no exec requests": 188, "pending": 0, "prog exec time": 233, "reproducing": 1, "rpc recv": 8658728136, "rpc sent": 765648328, "signal": 89691, "smash jobs": 1, "triage jobs": 1, "vm output": 11290789, "vm restarts [base]": 44, "vm restarts [new]": 101 } 2025/09/18 11:22:03 runner 4 connected 2025/09/18 11:22:20 base crash: WARNING in xfrm_state_fini 2025/09/18 11:22:25 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:22:37 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:22:47 runner 6 connected 2025/09/18 11:23:08 runner 2 connected 2025/09/18 11:23:11 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 11:23:13 runner 2 connected 2025/09/18 11:23:26 runner 9 connected 2025/09/18 11:23:27 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:23:54 patched crashed: INFO: rcu detected stall in sys_socket [need repro = false] 2025/09/18 11:24:02 runner 3 connected 2025/09/18 11:24:08 base crash: lost connection to test machine 2025/09/18 11:24:17 runner 8 connected 2025/09/18 11:24:34 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:24:44 runner 7 connected 2025/09/18 11:24:54 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:24:58 runner 0 connected 2025/09/18 11:25:16 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:25:18 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 11:25:22 base crash: INFO: rcu detected stall in futex 2025/09/18 11:25:30 runner 5 connected 2025/09/18 11:25:43 runner 1 connected 2025/09/18 11:25:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:26:05 runner 3 connected 2025/09/18 11:26:08 runner 4 connected 2025/09/18 11:26:10 runner 2 connected 2025/09/18 11:26:47 runner 6 connected 2025/09/18 11:27:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 26, "corpus": 13025, "corpus [files]": 14518, "corpus [symbols]": 9181, "cover overflows": 10090, "coverage": 92189, "distributor delayed": 17294, "distributor undelayed": 17294, "distributor violated": 29, "exec candidate": 30058, "exec collide": 20133, "exec fuzz": 38285, "exec gen": 2030, "exec hints": 12202, "exec inject": 0, "exec minimize": 1564, "exec retries": 119, "exec seeds": 210, "exec smash": 1688, "exec total [base]": 90150, "exec total [new]": 200760, "exec triage": 43536, "executor restarts [base]": 332, "executor restarts [new]": 676, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 7, "hints jobs": 5, "max signal": 96466, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 803, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13872, "no exec duration": 43636000000, "no exec requests": 189, "pending": 0, "prog exec time": 357, "reproducing": 1, "rpc recv": 9420542804, "rpc sent": 871332016, "signal": 89698, "smash jobs": 1, "triage jobs": 3, "vm output": 12652952, "vm restarts [base]": 49, "vm restarts [new]": 111 } 2025/09/18 11:27:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:27:17 base crash: INFO: rcu detected stall in futex 2025/09/18 11:27:21 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:27:56 runner 2 connected 2025/09/18 11:28:05 base crash: WARNING in xfrm_state_fini 2025/09/18 11:28:07 runner 0 connected 2025/09/18 11:28:10 runner 4 connected 2025/09/18 11:28:48 base crash: lost connection to test machine 2025/09/18 11:28:54 runner 1 connected 2025/09/18 11:28:57 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:29:00 fuzzer has reached the modified code (9185 + 14524 + 0), continuing fuzzing 2025/09/18 11:29:16 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:29:36 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:29:38 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 11:29:39 runner 0 connected 2025/09/18 11:29:48 runner 3 connected 2025/09/18 11:30:03 base crash: WARNING in xfrm_state_fini 2025/09/18 11:30:05 runner 4 connected 2025/09/18 11:30:25 runner 3 connected 2025/09/18 11:30:27 runner 8 connected 2025/09/18 11:30:28 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:30:34 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:30:53 runner 1 connected 2025/09/18 11:30:59 base crash "WARNING in xfrm6_tunnel_net_exit" is already known 2025/09/18 11:30:59 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/18 11:31:01 base crash: WARNING in xfrm_state_fini 2025/09/18 11:31:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:31:18 runner 2 connected 2025/09/18 11:31:25 runner 3 connected 2025/09/18 11:31:39 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:31:49 runner 7 connected 2025/09/18 11:31:49 runner 2 connected 2025/09/18 11:31:52 runner 6 connected 2025/09/18 11:31:52 base crash: lost connection to test machine 2025/09/18 11:32:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 26, "corpus": 13033, "corpus [files]": 14526, "corpus [symbols]": 9185, "cover overflows": 10913, "coverage": 92200, "distributor delayed": 17364, "distributor undelayed": 17364, "distributor violated": 29, "exec candidate": 30058, "exec collide": 24202, "exec fuzz": 46002, "exec gen": 2441, "exec hints": 13369, "exec inject": 0, "exec minimize": 1733, "exec retries": 129, "exec seeds": 234, "exec smash": 1905, "exec total [base]": 96385, "exec total [new]": 214688, "exec triage": 43689, "executor restarts [base]": 369, "executor restarts [new]": 730, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 3, "max signal": 96572, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 882, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13924, "no exec duration": 43639000000, "no exec requests": 190, "pending": 0, "prog exec time": 337, "reproducing": 1, "rpc recv": 10153437500, "rpc sent": 985271176, "signal": 89709, "smash jobs": 0, "triage jobs": 1, "vm output": 13966336, "vm restarts [base]": 55, "vm restarts [new]": 120 } 2025/09/18 11:32:27 runner 9 connected 2025/09/18 11:32:36 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:32:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:32:41 runner 1 connected 2025/09/18 11:33:13 base crash: WARNING in xfrm_state_fini 2025/09/18 11:33:26 runner 5 connected 2025/09/18 11:33:26 runner 7 connected 2025/09/18 11:33:37 base crash: lost connection to test machine 2025/09/18 11:34:04 runner 0 connected 2025/09/18 11:34:17 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:34:27 runner 1 connected 2025/09/18 11:34:27 base crash: SYZFAIL: repeatedly failed to execute the program 2025/09/18 11:34:52 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:35:02 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 11:35:06 runner 7 connected 2025/09/18 11:35:15 runner 3 connected 2025/09/18 11:35:19 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:35:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:35:35 base crash: lost connection to test machine 2025/09/18 11:35:41 runner 2 connected 2025/09/18 11:35:45 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:35:48 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:35:50 runner 4 connected 2025/09/18 11:36:06 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:36:09 runner 9 connected 2025/09/18 11:36:09 runner 8 connected 2025/09/18 11:36:14 base crash: WARNING in xfrm_state_fini 2025/09/18 11:36:24 runner 2 connected 2025/09/18 11:36:33 runner 0 connected 2025/09/18 11:36:36 runner 5 connected 2025/09/18 11:36:40 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:36:54 runner 6 connected 2025/09/18 11:37:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 26, "corpus": 13036, "corpus [files]": 14529, "corpus [symbols]": 9187, "cover overflows": 11740, "coverage": 92203, "distributor delayed": 17453, "distributor undelayed": 17453, "distributor violated": 29, "exec candidate": 30058, "exec collide": 28534, "exec fuzz": 54111, "exec gen": 2883, "exec hints": 14109, "exec inject": 0, "exec minimize": 1752, "exec retries": 148, "exec seeds": 243, "exec smash": 1980, "exec total [base]": 102662, "exec total [new]": 228598, "exec triage": 43860, "executor restarts [base]": 400, "executor restarts [new]": 792, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 3, "max signal": 96704, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 890, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 13980, "no exec duration": 43680000000, "no exec requests": 192, "pending": 0, "prog exec time": 288, "reproducing": 1, "rpc recv": 10897112124, "rpc sent": 1103518400, "signal": 89712, "smash jobs": 0, "triage jobs": 0, "vm output": 15219773, "vm restarts [base]": 61, "vm restarts [new]": 130 } 2025/09/18 11:37:03 runner 1 connected 2025/09/18 11:37:28 runner 8 connected 2025/09/18 11:37:59 base crash: WARNING in xfrm_state_fini 2025/09/18 11:38:18 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:38:26 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:38:48 runner 2 connected 2025/09/18 11:38:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:39:06 runner 1 connected 2025/09/18 11:39:14 runner 3 connected 2025/09/18 11:39:23 base crash: KASAN: slab-use-after-free Write in __xfrm_state_delete 2025/09/18 11:39:40 runner 2 connected 2025/09/18 11:39:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:40:11 runner 3 connected 2025/09/18 11:40:21 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:40:38 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:40:40 runner 6 connected 2025/09/18 11:41:10 runner 3 connected 2025/09/18 11:41:27 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:41:27 runner 9 connected 2025/09/18 11:41:44 base crash: WARNING in xfrm_state_fini 2025/09/18 11:41:54 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:41:58 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:42:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 32, "corpus": 13044, "corpus [files]": 14537, "corpus [symbols]": 9190, "cover overflows": 12650, "coverage": 92210, "distributor delayed": 17528, "distributor undelayed": 17528, "distributor violated": 29, "exec candidate": 30058, "exec collide": 33136, "exec fuzz": 62905, "exec gen": 3357, "exec hints": 14921, "exec inject": 0, "exec minimize": 1857, "exec retries": 161, "exec seeds": 267, "exec smash": 2161, "exec total [base]": 110594, "exec total [new]": 243778, "exec triage": 44048, "executor restarts [base]": 432, "executor restarts [new]": 847, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 0, "max signal": 96778, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 951, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14043, "no exec duration": 43680000000, "no exec requests": 192, "pending": 0, "prog exec time": 364, "reproducing": 1, "rpc recv": 11589802116, "rpc sent": 1236758760, "signal": 89719, "smash jobs": 1, "triage jobs": 0, "vm output": 16554927, "vm restarts [base]": 65, "vm restarts [new]": 136 } 2025/09/18 11:42:08 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:42:15 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:42:16 runner 8 connected 2025/09/18 11:42:33 runner 0 connected 2025/09/18 11:42:42 runner 5 connected 2025/09/18 11:42:46 runner 4 connected 2025/09/18 11:42:49 base crash: WARNING in xfrm_state_fini 2025/09/18 11:42:57 runner 1 connected 2025/09/18 11:43:05 runner 9 connected 2025/09/18 11:43:13 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 11:43:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:43:36 runner 3 connected 2025/09/18 11:43:46 base crash: WARNING in xfrm_state_fini 2025/09/18 11:44:02 runner 2 connected 2025/09/18 11:44:03 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:44:22 runner 7 connected 2025/09/18 11:44:36 runner 0 connected 2025/09/18 11:44:37 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:44:45 repro finished 'KFENCE: use-after-free read in xfrm_alloc_spi', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/09/18 11:44:45 failed repro for "KFENCE: use-after-free read in xfrm_alloc_spi", err=%!s() 2025/09/18 11:44:45 "KFENCE: use-after-free read in xfrm_alloc_spi": saved crash log into 1758195885.crash.log 2025/09/18 11:44:45 "KFENCE: use-after-free read in xfrm_alloc_spi": saved repro log into 1758195885.repro.log 2025/09/18 11:44:47 runner 0 connected 2025/09/18 11:44:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:44:52 runner 6 connected 2025/09/18 11:45:18 base crash: lost connection to test machine 2025/09/18 11:45:27 runner 1 connected 2025/09/18 11:45:35 runner 1 connected 2025/09/18 11:45:40 runner 5 connected 2025/09/18 11:45:45 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:45:46 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:46:08 runner 3 connected 2025/09/18 11:46:11 base crash: WARNING in xfrm_state_fini 2025/09/18 11:46:13 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:46:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:46:25 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:46:34 runner 7 connected 2025/09/18 11:46:36 runner 3 connected 2025/09/18 11:47:00 runner 0 connected 2025/09/18 11:47:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 32, "corpus": 13046, "corpus [files]": 14539, "corpus [symbols]": 9190, "cover overflows": 13665, "coverage": 92212, "distributor delayed": 17590, "distributor undelayed": 17590, "distributor violated": 29, "exec candidate": 30058, "exec collide": 37899, "exec fuzz": 72054, "exec gen": 3806, "exec hints": 15333, "exec inject": 0, "exec minimize": 1892, "exec retries": 177, "exec seeds": 273, "exec smash": 2215, "exec total [base]": 115175, "exec total [new]": 258779, "exec triage": 44164, "executor restarts [base]": 464, "executor restarts [new]": 914, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 2, "max signal": 96865, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 986, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14083, "no exec duration": 44058000000, "no exec requests": 194, "pending": 0, "prog exec time": 283, "reproducing": 0, "rpc recv": 12355873136, "rpc sent": 1354027696, "signal": 89721, "smash jobs": 0, "triage jobs": 3, "vm output": 18043160, "vm restarts [base]": 73, "vm restarts [new]": 147 } 2025/09/18 11:47:03 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:47:03 runner 5 connected 2025/09/18 11:47:12 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:47:12 runner 8 connected 2025/09/18 11:47:14 runner 4 connected 2025/09/18 11:47:35 base crash: lost connection to test machine 2025/09/18 11:47:49 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:47:52 runner 6 connected 2025/09/18 11:47:56 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:48:01 runner 9 connected 2025/09/18 11:48:07 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:48:08 base crash: lost connection to test machine 2025/09/18 11:48:24 runner 3 connected 2025/09/18 11:48:38 runner 3 connected 2025/09/18 11:48:46 runner 4 connected 2025/09/18 11:48:46 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:48:53 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:48:56 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:48:56 runner 8 connected 2025/09/18 11:48:57 runner 0 connected 2025/09/18 11:49:25 base crash: INFO: rcu detected stall in smp_call_function 2025/09/18 11:49:30 base crash: WARNING in xfrm_state_fini 2025/09/18 11:49:36 runner 7 connected 2025/09/18 11:49:44 runner 2 connected 2025/09/18 11:49:46 runner 0 connected 2025/09/18 11:49:55 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:50:14 runner 2 connected 2025/09/18 11:50:19 runner 3 connected 2025/09/18 11:50:43 runner 9 connected 2025/09/18 11:50:50 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:51:31 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:51:40 runner 1 connected 2025/09/18 11:51:47 patched crashed: INFO: rcu detected stall in sys_socket [need repro = false] 2025/09/18 11:51:51 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:52:00 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:52:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13051, "corpus [files]": 14544, "corpus [symbols]": 9194, "cover overflows": 14630, "coverage": 92220, "distributor delayed": 17641, "distributor undelayed": 17641, "distributor violated": 29, "exec candidate": 30058, "exec collide": 42694, "exec fuzz": 81126, "exec gen": 4260, "exec hints": 15792, "exec inject": 0, "exec minimize": 2043, "exec retries": 184, "exec seeds": 288, "exec smash": 2322, "exec total [base]": 120312, "exec total [new]": 273948, "exec triage": 44273, "executor restarts [base]": 493, "executor restarts [new]": 991, "fault jobs": 0, "fuzzer jobs": 7, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 3, "max signal": 96975, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1053, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14121, "no exec duration": 44302000000, "no exec requests": 196, "pending": 0, "prog exec time": 362, "reproducing": 0, "rpc recv": 13145239912, "rpc sent": 1476974192, "signal": 89729, "smash jobs": 1, "triage jobs": 3, "vm output": 19349051, "vm restarts [base]": 77, "vm restarts [new]": 160 } 2025/09/18 11:52:08 base crash: KASAN: slab-use-after-free Write in __xfrm_state_delete 2025/09/18 11:52:20 runner 4 connected 2025/09/18 11:52:36 runner 3 connected 2025/09/18 11:52:40 runner 2 connected 2025/09/18 11:52:43 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 11:52:44 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:52:48 runner 0 connected 2025/09/18 11:52:58 runner 3 connected 2025/09/18 11:53:32 runner 5 connected 2025/09/18 11:53:35 runner 2 connected 2025/09/18 11:54:23 base crash: INFO: task hung in reg_check_chans_work 2025/09/18 11:54:42 base crash: WARNING in xfrm_state_fini 2025/09/18 11:54:42 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:54:43 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:54:49 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:55:12 patched crashed: INFO: rcu detected stall in security_file_ioctl [need repro = false] 2025/09/18 11:55:15 runner 1 connected 2025/09/18 11:55:30 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:55:30 runner 0 connected 2025/09/18 11:55:31 runner 7 connected 2025/09/18 11:55:31 runner 8 connected 2025/09/18 11:55:38 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 11:55:40 patched crashed: INFO: rcu detected stall in sys_bpf [need repro = false] 2025/09/18 11:55:40 runner 9 connected 2025/09/18 11:55:48 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:55:51 base crash: lost connection to test machine 2025/09/18 11:56:00 runner 4 connected 2025/09/18 11:56:18 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:56:19 runner 3 connected 2025/09/18 11:56:27 runner 6 connected 2025/09/18 11:56:29 runner 2 connected 2025/09/18 11:56:37 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 11:56:38 runner 1 connected 2025/09/18 11:56:42 runner 1 connected 2025/09/18 11:56:50 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:57:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13053, "corpus [files]": 14546, "corpus [symbols]": 9196, "cover overflows": 15566, "coverage": 92221, "distributor delayed": 17711, "distributor undelayed": 17711, "distributor violated": 29, "exec candidate": 30058, "exec collide": 47567, "exec fuzz": 90099, "exec gen": 4750, "exec hints": 16421, "exec inject": 0, "exec minimize": 2087, "exec retries": 194, "exec seeds": 294, "exec smash": 2376, "exec total [base]": 125866, "exec total [new]": 289176, "exec triage": 44423, "executor restarts [base]": 516, "executor restarts [new]": 1057, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 4, "max signal": 97054, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1075, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14168, "no exec duration": 44576000000, "no exec requests": 199, "pending": 0, "prog exec time": 383, "reproducing": 0, "rpc recv": 13954570516, "rpc sent": 1602582064, "signal": 89730, "smash jobs": 1, "triage jobs": 0, "vm output": 20604239, "vm restarts [base]": 82, "vm restarts [new]": 173 } 2025/09/18 11:57:06 runner 9 connected 2025/09/18 11:57:10 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/09/18 11:57:12 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 11:57:13 base crash: unregister_netdevice: waiting for DEV to become free 2025/09/18 11:57:26 runner 2 connected 2025/09/18 11:57:30 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:57:38 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 11:57:39 runner 0 connected 2025/09/18 11:57:58 runner 7 connected 2025/09/18 11:57:58 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:58:03 runner 0 connected 2025/09/18 11:58:09 runner 3 connected 2025/09/18 11:58:19 runner 5 connected 2025/09/18 11:58:28 runner 9 connected 2025/09/18 11:58:36 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 11:58:47 runner 8 connected 2025/09/18 11:59:06 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 11:59:25 runner 4 connected 2025/09/18 11:59:49 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:00:01 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:00:02 runner 9 connected 2025/09/18 12:00:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:00:19 base crash: WARNING in xfrm_state_fini 2025/09/18 12:00:29 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:00:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:00:38 runner 2 connected 2025/09/18 12:00:39 base crash: lost connection to test machine 2025/09/18 12:00:49 runner 3 connected 2025/09/18 12:00:56 runner 5 connected 2025/09/18 12:01:01 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 12:01:05 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:01:08 runner 1 connected 2025/09/18 12:01:17 runner 4 connected 2025/09/18 12:01:23 runner 0 connected 2025/09/18 12:01:31 runner 3 connected 2025/09/18 12:01:43 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 12:01:50 runner 6 connected 2025/09/18 12:01:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:01:55 runner 8 connected 2025/09/18 12:02:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13056, "corpus [files]": 14549, "corpus [symbols]": 9198, "cover overflows": 16492, "coverage": 92224, "distributor delayed": 17758, "distributor undelayed": 17758, "distributor violated": 29, "exec candidate": 30058, "exec collide": 52078, "exec fuzz": 98546, "exec gen": 5251, "exec hints": 16743, "exec inject": 0, "exec minimize": 2180, "exec retries": 203, "exec seeds": 303, "exec smash": 2445, "exec total [base]": 131955, "exec total [new]": 303220, "exec triage": 44515, "executor restarts [base]": 550, "executor restarts [new]": 1124, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 2, "max signal": 97104, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1130, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14199, "no exec duration": 44576000000, "no exec requests": 199, "pending": 0, "prog exec time": 421, "reproducing": 0, "rpc recv": 14812579076, "rpc sent": 1727900248, "signal": 89732, "smash jobs": 1, "triage jobs": 1, "vm output": 21817633, "vm restarts [base]": 87, "vm restarts [new]": 188 } 2025/09/18 12:02:01 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:02:31 runner 0 connected 2025/09/18 12:02:33 base crash: WARNING in xfrm_state_fini 2025/09/18 12:02:39 runner 7 connected 2025/09/18 12:02:51 runner 9 connected 2025/09/18 12:02:57 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:03:07 base crash: WARNING in xfrm_state_fini 2025/09/18 12:03:09 base crash: WARNING in xfrm_state_fini 2025/09/18 12:03:22 runner 2 connected 2025/09/18 12:03:46 runner 1 connected 2025/09/18 12:03:55 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:03:56 runner 0 connected 2025/09/18 12:03:57 runner 1 connected 2025/09/18 12:04:10 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:04:13 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:04:25 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:04:27 base crash: lost connection to test machine 2025/09/18 12:04:44 runner 5 connected 2025/09/18 12:05:04 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:05:06 runner 8 connected 2025/09/18 12:05:10 runner 7 connected 2025/09/18 12:05:14 runner 4 connected 2025/09/18 12:05:16 runner 0 connected 2025/09/18 12:05:41 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:05:53 runner 9 connected 2025/09/18 12:06:02 base crash: WARNING in xfrm_state_fini 2025/09/18 12:06:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:06:17 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 12:06:31 runner 7 connected 2025/09/18 12:06:43 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 12:06:49 runner 2 connected 2025/09/18 12:06:52 runner 3 connected 2025/09/18 12:07:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13060, "corpus [files]": 14553, "corpus [symbols]": 9201, "cover overflows": 17574, "coverage": 92230, "distributor delayed": 17808, "distributor undelayed": 17808, "distributor violated": 29, "exec candidate": 30058, "exec collide": 57347, "exec fuzz": 108752, "exec gen": 5760, "exec hints": 17219, "exec inject": 0, "exec minimize": 2384, "exec retries": 222, "exec seeds": 315, "exec smash": 2559, "exec total [base]": 137400, "exec total [new]": 320136, "exec triage": 44621, "executor restarts [base]": 573, "executor restarts [new]": 1197, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 10, "hints jobs": 2, "max signal": 97168, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1205, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14237, "no exec duration": 44585000000, "no exec requests": 200, "pending": 0, "prog exec time": 387, "reproducing": 0, "rpc recv": 15596491260, "rpc sent": 1865608744, "signal": 89738, "smash jobs": 0, "triage jobs": 3, "vm output": 23249613, "vm restarts [base]": 93, "vm restarts [new]": 198 } 2025/09/18 12:07:14 runner 1 connected 2025/09/18 12:07:22 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:07:33 runner 3 connected 2025/09/18 12:07:39 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 12:08:10 runner 5 connected 2025/09/18 12:08:12 patched crashed: INFO: rcu detected stall in netlink_deliver_tap [need repro = false] 2025/09/18 12:08:19 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:08:26 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:08:28 runner 6 connected 2025/09/18 12:08:32 base crash: WARNING in xfrm_state_fini 2025/09/18 12:08:58 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:09:02 runner 0 connected 2025/09/18 12:09:03 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:09:08 runner 9 connected 2025/09/18 12:09:15 runner 4 connected 2025/09/18 12:09:20 runner 0 connected 2025/09/18 12:09:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:09:48 runner 1 connected 2025/09/18 12:09:52 runner 3 connected 2025/09/18 12:09:53 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:09:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:10:14 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:10:16 runner 1 connected 2025/09/18 12:10:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:10:40 base crash: WARNING in xfrm_state_fini 2025/09/18 12:10:42 runner 7 connected 2025/09/18 12:10:50 runner 0 connected 2025/09/18 12:11:02 runner 8 connected 2025/09/18 12:11:10 runner 3 connected 2025/09/18 12:11:10 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:11:19 base crash: INFO: rcu detected stall in sys_bpf 2025/09/18 12:11:24 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:11:28 runner 3 connected 2025/09/18 12:11:44 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:12:00 runner 4 connected 2025/09/18 12:12:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13061, "corpus [files]": 14554, "corpus [symbols]": 9201, "cover overflows": 18645, "coverage": 92231, "distributor delayed": 17860, "distributor undelayed": 17860, "distributor violated": 29, "exec candidate": 30058, "exec collide": 62633, "exec fuzz": 118533, "exec gen": 6223, "exec hints": 17694, "exec inject": 0, "exec minimize": 2404, "exec retries": 231, "exec seeds": 318, "exec smash": 2584, "exec total [base]": 143263, "exec total [new]": 336327, "exec triage": 44758, "executor restarts [base]": 607, "executor restarts [new]": 1268, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 1, "max signal": 97236, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1232, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14278, "no exec duration": 45549000000, "no exec requests": 207, "pending": 0, "prog exec time": 337, "reproducing": 0, "rpc recv": 16355090916, "rpc sent": 2000834008, "signal": 89739, "smash jobs": 0, "triage jobs": 0, "vm output": 24635892, "vm restarts [base]": 98, "vm restarts [new]": 210 } 2025/09/18 12:12:03 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:12:08 runner 2 connected 2025/09/18 12:12:13 runner 1 connected 2025/09/18 12:12:20 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:12:26 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:12:34 runner 6 connected 2025/09/18 12:12:54 runner 5 connected 2025/09/18 12:13:10 runner 9 connected 2025/09/18 12:13:14 runner 2 connected 2025/09/18 12:13:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:13:39 base crash: WARNING in xfrm_state_fini 2025/09/18 12:13:48 base crash: lost connection to test machine 2025/09/18 12:13:59 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:14:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:14:16 base crash: KASAN: slab-use-after-free Read in xfrm_state_find 2025/09/18 12:14:16 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:14:21 runner 8 connected 2025/09/18 12:14:27 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:14:28 runner 2 connected 2025/09/18 12:14:28 patched crashed: INFO: rcu detected stall in ieee80211_handle_queued_frames [need repro = false] 2025/09/18 12:14:37 runner 0 connected 2025/09/18 12:14:49 runner 9 connected 2025/09/18 12:15:00 runner 3 connected 2025/09/18 12:15:05 runner 1 connected 2025/09/18 12:15:05 runner 5 connected 2025/09/18 12:15:16 runner 0 connected 2025/09/18 12:15:17 runner 1 connected 2025/09/18 12:15:53 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 12:15:54 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:16:16 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:16:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:16:49 runner 4 connected 2025/09/18 12:16:52 runner 6 connected 2025/09/18 12:17:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13065, "corpus [files]": 14558, "corpus [symbols]": 9203, "cover overflows": 19595, "coverage": 92234, "distributor delayed": 17890, "distributor undelayed": 17890, "distributor violated": 29, "exec candidate": 30058, "exec collide": 66978, "exec fuzz": 127020, "exec gen": 6682, "exec hints": 18146, "exec inject": 0, "exec minimize": 2479, "exec retries": 245, "exec seeds": 330, "exec smash": 2684, "exec total [base]": 150176, "exec total [new]": 350337, "exec triage": 44834, "executor restarts [base]": 636, "executor restarts [new]": 1338, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 7, "hints jobs": 1, "max signal": 97335, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1279, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14305, "no exec duration": 45624000000, "no exec requests": 208, "pending": 0, "prog exec time": 323, "reproducing": 0, "rpc recv": 17179250388, "rpc sent": 2128397512, "signal": 89742, "smash jobs": 0, "triage jobs": 2, "vm output": 25931418, "vm restarts [base]": 102, "vm restarts [new]": 223 } 2025/09/18 12:17:06 runner 2 connected 2025/09/18 12:17:27 patched crashed: INFO: rcu detected stall in sys_socket [need repro = false] 2025/09/18 12:17:44 runner 7 connected 2025/09/18 12:18:16 patched crashed: INFO: rcu detected stall in rtnl_dumpit [need repro = false] 2025/09/18 12:18:18 runner 1 connected 2025/09/18 12:18:19 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 12:18:29 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:18:30 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 12:18:31 base crash: INFO: rcu detected stall in perf_ioctl 2025/09/18 12:18:49 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:18:56 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:19:05 runner 3 connected 2025/09/18 12:19:09 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:19:15 runner 0 connected 2025/09/18 12:19:19 runner 5 connected 2025/09/18 12:19:19 runner 3 connected 2025/09/18 12:19:19 runner 8 connected 2025/09/18 12:19:38 runner 6 connected 2025/09/18 12:19:45 runner 7 connected 2025/09/18 12:19:57 runner 9 connected 2025/09/18 12:20:17 base crash: INFO: rcu detected stall in sys_bpf 2025/09/18 12:20:40 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:21:06 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:21:14 runner 1 connected 2025/09/18 12:21:28 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:21:30 runner 4 connected 2025/09/18 12:21:32 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:21:55 runner 1 connected 2025/09/18 12:22:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13071, "corpus [files]": 14564, "corpus [symbols]": 9206, "cover overflows": 20261, "coverage": 92241, "distributor delayed": 17928, "distributor undelayed": 17928, "distributor violated": 29, "exec candidate": 30058, "exec collide": 70462, "exec fuzz": 133589, "exec gen": 7057, "exec hints": 18474, "exec inject": 0, "exec minimize": 2609, "exec retries": 254, "exec seeds": 348, "exec smash": 2812, "exec total [base]": 155461, "exec total [new]": 361444, "exec triage": 44903, "executor restarts [base]": 656, "executor restarts [new]": 1403, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 7, "hints jobs": 2, "max signal": 97361, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1360, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14328, "no exec duration": 46138000000, "no exec requests": 211, "pending": 0, "prog exec time": 396, "reproducing": 0, "rpc recv": 17840015372, "rpc sent": 2233389288, "signal": 89749, "smash jobs": 1, "triage jobs": 1, "vm output": 26958339, "vm restarts [base]": 104, "vm restarts [new]": 235 } 2025/09/18 12:22:17 runner 9 connected 2025/09/18 12:22:22 runner 5 connected 2025/09/18 12:22:23 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:22:31 base crash: INFO: task hung in nfsd_nl_threads_set_doit 2025/09/18 12:22:36 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:23:12 runner 3 connected 2025/09/18 12:23:26 runner 8 connected 2025/09/18 12:23:26 patched crashed: no output from test machine [need repro = false] 2025/09/18 12:23:27 runner 2 connected 2025/09/18 12:23:39 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:23:53 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:23:54 patched crashed: INFO: rcu detected stall in perf_event_open [need repro = false] 2025/09/18 12:24:23 runner 2 connected 2025/09/18 12:24:27 runner 4 connected 2025/09/18 12:24:37 base crash: no output from test machine 2025/09/18 12:24:44 runner 0 connected 2025/09/18 12:24:44 runner 1 connected 2025/09/18 12:24:46 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:25:22 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/09/18 12:25:26 runner 0 connected 2025/09/18 12:25:36 runner 2 connected 2025/09/18 12:25:40 base crash: WARNING in xfrm_state_fini 2025/09/18 12:25:44 base crash: INFO: rcu detected stall in corrupted 2025/09/18 12:25:49 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 12:25:57 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:26:10 runner 9 connected 2025/09/18 12:26:15 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:26:16 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:26:28 runner 3 connected 2025/09/18 12:26:33 runner 1 connected 2025/09/18 12:26:38 runner 3 connected 2025/09/18 12:26:46 runner 1 connected 2025/09/18 12:27:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13075, "corpus [files]": 14568, "corpus [symbols]": 9207, "cover overflows": 21098, "coverage": 92246, "distributor delayed": 17968, "distributor undelayed": 17968, "distributor violated": 29, "exec candidate": 30058, "exec collide": 74158, "exec fuzz": 140820, "exec gen": 7427, "exec hints": 18746, "exec inject": 0, "exec minimize": 2730, "exec retries": 263, "exec seeds": 360, "exec smash": 2913, "exec total [base]": 159920, "exec total [new]": 373364, "exec triage": 45011, "executor restarts [base]": 679, "executor restarts [new]": 1476, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 8, "hints jobs": 1, "max signal": 97454, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1418, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14363, "no exec duration": 46929000000, "no exec requests": 212, "pending": 0, "prog exec time": 375, "reproducing": 0, "rpc recv": 18565913240, "rpc sent": 2333233968, "signal": 89752, "smash jobs": 0, "triage jobs": 1, "vm output": 28132252, "vm restarts [base]": 109, "vm restarts [new]": 246 } 2025/09/18 12:27:05 runner 7 connected 2025/09/18 12:27:11 runner 5 connected 2025/09/18 12:27:41 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:28:03 base crash: WARNING in xfrm_state_fini 2025/09/18 12:28:12 base crash: WARNING in xfrm_state_fini 2025/09/18 12:28:28 patched crashed: no output from test machine [need repro = false] 2025/09/18 12:28:37 runner 9 connected 2025/09/18 12:29:00 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:29:01 runner 3 connected 2025/09/18 12:29:09 runner 2 connected 2025/09/18 12:29:11 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:29:18 runner 6 connected 2025/09/18 12:29:45 base crash: WARNING in xfrm_state_fini 2025/09/18 12:29:51 runner 1 connected 2025/09/18 12:30:00 runner 5 connected 2025/09/18 12:30:01 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:30:06 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:30:13 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:30:34 runner 0 connected 2025/09/18 12:30:58 runner 3 connected 2025/09/18 12:31:02 runner 8 connected 2025/09/18 12:31:05 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:31:09 runner 7 connected 2025/09/18 12:31:23 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:31:27 base crash: lost connection to test machine 2025/09/18 12:31:35 base crash "KASAN: slab-use-after-free Read in __xfrm_state_insert" is already known 2025/09/18 12:31:35 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_insert [need repro = false] 2025/09/18 12:31:49 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:31:55 runner 9 connected 2025/09/18 12:32:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13075, "corpus [files]": 14568, "corpus [symbols]": 9207, "cover overflows": 22037, "coverage": 92246, "distributor delayed": 18000, "distributor undelayed": 18000, "distributor violated": 29, "exec candidate": 30058, "exec collide": 78963, "exec fuzz": 149751, "exec gen": 7905, "exec hints": 18989, "exec inject": 0, "exec minimize": 2774, "exec retries": 273, "exec seeds": 360, "exec smash": 2913, "exec total [base]": 166298, "exec total [new]": 387951, "exec triage": 45091, "executor restarts [base]": 703, "executor restarts [new]": 1538, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 0, "max signal": 97511, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1435, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14388, "no exec duration": 47272000000, "no exec requests": 216, "pending": 0, "prog exec time": 437, "reproducing": 0, "rpc recv": 19212118520, "rpc sent": 2459044752, "signal": 89752, "smash jobs": 0, "triage jobs": 0, "vm output": 29340771, "vm restarts [base]": 113, "vm restarts [new]": 255 } 2025/09/18 12:32:12 runner 0 connected 2025/09/18 12:32:15 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:32:16 runner 0 connected 2025/09/18 12:32:24 runner 5 connected 2025/09/18 12:32:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:32:37 runner 3 connected 2025/09/18 12:33:05 runner 1 connected 2025/09/18 12:33:22 runner 8 connected 2025/09/18 12:33:23 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:33:31 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:33:32 patched crashed: no output from test machine [need repro = false] 2025/09/18 12:33:54 base crash: WARNING in xfrm_state_fini 2025/09/18 12:34:00 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:34:20 runner 7 connected 2025/09/18 12:34:20 runner 5 connected 2025/09/18 12:34:22 runner 2 connected 2025/09/18 12:34:42 runner 2 connected 2025/09/18 12:34:49 runner 3 connected 2025/09/18 12:35:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:35:14 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:35:17 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:35:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:35:30 base crash: lost connection to test machine 2025/09/18 12:35:37 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:35:51 runner 4 connected 2025/09/18 12:36:03 runner 7 connected 2025/09/18 12:36:07 runner 6 connected 2025/09/18 12:36:10 base crash: WARNING in xfrm6_tunnel_net_exit 2025/09/18 12:36:10 runner 9 connected 2025/09/18 12:36:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:36:15 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 12:36:19 runner 1 connected 2025/09/18 12:36:26 runner 2 connected 2025/09/18 12:36:33 base crash: WARNING in xfrm_state_fini 2025/09/18 12:36:58 runner 1 connected 2025/09/18 12:36:58 runner 2 connected 2025/09/18 12:37:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13078, "corpus [files]": 14571, "corpus [symbols]": 9208, "cover overflows": 22850, "coverage": 92249, "distributor delayed": 18045, "distributor undelayed": 18045, "distributor violated": 29, "exec candidate": 30058, "exec collide": 83333, "exec fuzz": 157886, "exec gen": 8308, "exec hints": 19014, "exec inject": 0, "exec minimize": 2861, "exec retries": 283, "exec seeds": 369, "exec smash": 2969, "exec total [base]": 172742, "exec total [new]": 401116, "exec triage": 45163, "executor restarts [base]": 732, "executor restarts [new]": 1611, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 0, "max signal": 97546, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1486, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14413, "no exec duration": 47272000000, "no exec requests": 216, "pending": 0, "prog exec time": 314, "reproducing": 0, "rpc recv": 20048276356, "rpc sent": 2583563560, "signal": 89755, "smash jobs": 1, "triage jobs": 1, "vm output": 30554649, "vm restarts [base]": 118, "vm restarts [new]": 269 } 2025/09/18 12:37:04 runner 0 connected 2025/09/18 12:37:10 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:37:19 patched crashed: INFO: rcu detected stall in security_file_ioctl [need repro = false] 2025/09/18 12:37:23 runner 3 connected 2025/09/18 12:38:00 runner 4 connected 2025/09/18 12:38:06 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:38:09 runner 8 connected 2025/09/18 12:38:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:38:12 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:38:21 patched crashed: INFO: rcu detected stall in genl_dumpit [need repro = false] 2025/09/18 12:38:27 base crash: WARNING in xfrm_state_fini 2025/09/18 12:38:30 base crash: lost connection to test machine 2025/09/18 12:38:31 base crash: lost connection to test machine 2025/09/18 12:38:55 runner 5 connected 2025/09/18 12:39:01 runner 0 connected 2025/09/18 12:39:03 runner 6 connected 2025/09/18 12:39:11 runner 9 connected 2025/09/18 12:39:17 runner 0 connected 2025/09/18 12:39:18 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:39:19 runner 2 connected 2025/09/18 12:39:20 runner 1 connected 2025/09/18 12:39:32 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:39:47 base crash: INFO: rcu detected stall in __sock_create 2025/09/18 12:40:15 runner 1 connected 2025/09/18 12:40:18 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:40:22 runner 7 connected 2025/09/18 12:40:36 runner 3 connected 2025/09/18 12:40:55 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:41:15 runner 9 connected 2025/09/18 12:41:34 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:41:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:41:41 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:41:43 runner 0 connected 2025/09/18 12:41:44 patched crashed: INFO: rcu detected stall in sys_bpf [need repro = false] 2025/09/18 12:42:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 13079, "corpus [files]": 14573, "corpus [symbols]": 9210, "cover overflows": 23899, "coverage": 92252, "distributor delayed": 18090, "distributor undelayed": 18090, "distributor violated": 29, "exec candidate": 30058, "exec collide": 88507, "exec fuzz": 167690, "exec gen": 8858, "exec hints": 19029, "exec inject": 0, "exec minimize": 2918, "exec retries": 289, "exec seeds": 375, "exec smash": 3023, "exec total [base]": 177328, "exec total [new]": 416868, "exec triage": 45255, "executor restarts [base]": 759, "executor restarts [new]": 1676, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 0, "max signal": 97596, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1510, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14443, "no exec duration": 47272000000, "no exec requests": 216, "pending": 0, "prog exec time": 397, "reproducing": 0, "rpc recv": 20813647204, "rpc sent": 2710970824, "signal": 89757, "smash jobs": 0, "triage jobs": 2, "vm output": 31844805, "vm restarts [base]": 124, "vm restarts [new]": 279 } 2025/09/18 12:42:11 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:42:23 runner 2 connected 2025/09/18 12:42:32 runner 3 connected 2025/09/18 12:42:32 runner 8 connected 2025/09/18 12:42:33 runner 2 connected 2025/09/18 12:43:01 runner 0 connected 2025/09/18 12:43:36 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:43:47 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:44:05 base crash: INFO: task hung in perf_tp_event_init 2025/09/18 12:44:06 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 12:44:28 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:44:33 runner 6 connected 2025/09/18 12:44:36 runner 1 connected 2025/09/18 12:44:44 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:44:50 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:44:54 runner 3 connected 2025/09/18 12:45:02 runner 9 connected 2025/09/18 12:45:18 runner 2 connected 2025/09/18 12:45:21 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:45:21 base crash: INFO: rcu detected stall in smp_call_function 2025/09/18 12:45:25 base crash: WARNING in xfrm_state_fini 2025/09/18 12:45:27 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:45:33 runner 5 connected 2025/09/18 12:45:40 runner 0 connected 2025/09/18 12:45:58 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:46:03 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:46:08 base crash: WARNING in xfrm_state_fini 2025/09/18 12:46:11 runner 7 connected 2025/09/18 12:46:14 runner 3 connected 2025/09/18 12:46:17 runner 6 connected 2025/09/18 12:46:18 runner 0 connected 2025/09/18 12:46:47 runner 2 connected 2025/09/18 12:46:51 runner 4 connected 2025/09/18 12:46:56 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:46:56 runner 1 connected 2025/09/18 12:47:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 13081, "corpus [files]": 14575, "corpus [symbols]": 9212, "cover overflows": 24699, "coverage": 92254, "distributor delayed": 18118, "distributor undelayed": 18118, "distributor violated": 29, "exec candidate": 30058, "exec collide": 92819, "exec fuzz": 175878, "exec gen": 9263, "exec hints": 19044, "exec inject": 0, "exec minimize": 2987, "exec retries": 301, "exec seeds": 381, "exec smash": 3067, "exec total [base]": 181520, "exec total [new]": 429976, "exec triage": 45311, "executor restarts [base]": 791, "executor restarts [new]": 1750, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 8, "hints jobs": 0, "max signal": 97885, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1536, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14461, "no exec duration": 47299000000, "no exec requests": 217, "pending": 0, "prog exec time": 310, "reproducing": 0, "rpc recv": 21562947816, "rpc sent": 2819893088, "signal": 89759, "smash jobs": 0, "triage jobs": 0, "vm output": 33253669, "vm restarts [base]": 130, "vm restarts [new]": 292 } 2025/09/18 12:47:14 patched crashed: INFO: rcu detected stall in mac80211_hwsim_beacon [need repro = false] 2025/09/18 12:47:14 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:47:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:47:45 runner 3 connected 2025/09/18 12:48:03 runner 8 connected 2025/09/18 12:48:03 runner 0 connected 2025/09/18 12:48:10 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:48:22 runner 1 connected 2025/09/18 12:48:48 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:48:49 base crash: lost connection to test machine 2025/09/18 12:48:55 patched crashed: INFO: rcu detected stall in sys_openat [need repro = false] 2025/09/18 12:48:59 runner 7 connected 2025/09/18 12:49:24 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:49:27 base crash: WARNING in xfrm_state_fini 2025/09/18 12:49:44 runner 3 connected 2025/09/18 12:49:45 runner 6 connected 2025/09/18 12:49:45 runner 2 connected 2025/09/18 12:49:50 base crash: INFO: rcu detected stall in sys_openat 2025/09/18 12:50:07 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:50:13 runner 9 connected 2025/09/18 12:50:18 runner 0 connected 2025/09/18 12:50:33 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:50:40 runner 3 connected 2025/09/18 12:50:53 patched crashed: WARNING in xfrm6_tunnel_net_exit [need repro = false] 2025/09/18 12:50:57 runner 7 connected 2025/09/18 12:51:21 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 12:51:23 runner 0 connected 2025/09/18 12:51:33 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 12:51:43 runner 6 connected 2025/09/18 12:51:47 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:52:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 13083, "corpus [files]": 14577, "corpus [symbols]": 9213, "cover overflows": 25572, "coverage": 92256, "distributor delayed": 18143, "distributor undelayed": 18143, "distributor violated": 29, "exec candidate": 30058, "exec collide": 97350, "exec fuzz": 184500, "exec gen": 9709, "exec hints": 19049, "exec inject": 0, "exec minimize": 3065, "exec retries": 311, "exec seeds": 387, "exec smash": 3117, "exec total [base]": 187837, "exec total [new]": 443764, "exec triage": 45361, "executor restarts [base]": 819, "executor restarts [new]": 1821, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 7, "hints jobs": 0, "max signal": 97904, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1584, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14478, "no exec duration": 48704000000, "no exec requests": 221, "pending": 0, "prog exec time": 392, "reproducing": 0, "rpc recv": 22291023172, "rpc sent": 2941350544, "signal": 89761, "smash jobs": 0, "triage jobs": 0, "vm output": 34467368, "vm restarts [base]": 133, "vm restarts [new]": 303 } 2025/09/18 12:52:10 runner 5 connected 2025/09/18 12:52:22 runner 2 connected 2025/09/18 12:52:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:52:36 runner 4 connected 2025/09/18 12:52:42 base crash: WARNING in xfrm_state_fini 2025/09/18 12:53:05 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:53:10 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 12:53:17 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:53:22 runner 8 connected 2025/09/18 12:53:33 runner 1 connected 2025/09/18 12:53:39 patched crashed: KASAN: slab-use-after-free Write in __xfrm_state_delete [need repro = false] 2025/09/18 12:53:44 base crash: WARNING in xfrm_state_fini 2025/09/18 12:53:54 runner 1 connected 2025/09/18 12:54:00 runner 2 connected 2025/09/18 12:54:06 runner 6 connected 2025/09/18 12:54:27 runner 0 connected 2025/09/18 12:54:32 runner 0 connected 2025/09/18 12:55:12 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:55:19 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 12:55:22 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 12:56:02 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:56:07 runner 3 connected 2025/09/18 12:56:08 runner 2 connected 2025/09/18 12:56:12 runner 3 connected 2025/09/18 12:56:18 base crash: INFO: rcu detected stall in sys_clone 2025/09/18 12:56:22 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 12:56:29 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:56:51 runner 5 connected 2025/09/18 12:57:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 13084, "corpus [files]": 14577, "corpus [symbols]": 9213, "cover overflows": 26644, "coverage": 92257, "distributor delayed": 18168, "distributor undelayed": 18168, "distributor violated": 29, "exec candidate": 30058, "exec collide": 102701, "exec fuzz": 195011, "exec gen": 10266, "exec hints": 19049, "exec inject": 0, "exec minimize": 3151, "exec retries": 316, "exec seeds": 387, "exec smash": 3123, "exec total [base]": 193568, "exec total [new]": 460345, "exec triage": 45429, "executor restarts [base]": 839, "executor restarts [new]": 1878, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 8, "hints jobs": 0, "max signal": 97938, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1614, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14501, "no exec duration": 48704000000, "no exec requests": 221, "pending": 0, "prog exec time": 367, "reproducing": 0, "rpc recv": 22988846320, "rpc sent": 3080144064, "signal": 89762, "smash jobs": 1, "triage jobs": 0, "vm output": 35855629, "vm restarts [base]": 137, "vm restarts [new]": 313 } 2025/09/18 12:57:07 runner 2 connected 2025/09/18 12:57:09 runner 0 connected 2025/09/18 12:57:19 runner 8 connected 2025/09/18 12:57:26 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:57:30 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 12:57:31 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:57:56 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:57:59 base crash: lost connection to test machine 2025/09/18 12:58:00 base crash: WARNING in xfrm_state_fini 2025/09/18 12:58:14 runner 4 connected 2025/09/18 12:58:19 runner 9 connected 2025/09/18 12:58:20 runner 3 connected 2025/09/18 12:58:27 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 12:58:45 runner 3 connected 2025/09/18 12:58:48 runner 0 connected 2025/09/18 12:58:50 runner 1 connected 2025/09/18 12:59:04 patched crashed: INFO: task hung in nfsd_nl_threads_get_doit [need repro = true] 2025/09/18 12:59:04 scheduled a reproduction of 'INFO: task hung in nfsd_nl_threads_get_doit' 2025/09/18 12:59:04 start reproducing 'INFO: task hung in nfsd_nl_threads_get_doit' 2025/09/18 12:59:13 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 12:59:43 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 12:59:53 runner 6 connected 2025/09/18 12:59:58 patched crashed: INFO: rcu detected stall in security_file_ioctl [need repro = false] 2025/09/18 13:00:03 runner 9 connected 2025/09/18 13:00:03 base crash: lost connection to test machine 2025/09/18 13:00:11 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 13:00:32 runner 5 connected 2025/09/18 13:00:47 runner 8 connected 2025/09/18 13:00:53 runner 2 connected 2025/09/18 13:00:56 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 13:01:00 runner 0 connected 2025/09/18 13:01:26 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:01:27 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:01:30 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 13:01:34 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:01:42 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 13:01:45 runner 3 connected 2025/09/18 13:02:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 41, "corpus": 13085, "corpus [files]": 14578, "corpus [symbols]": 9214, "cover overflows": 27520, "coverage": 92258, "distributor delayed": 18185, "distributor undelayed": 18184, "distributor violated": 29, "exec candidate": 30058, "exec collide": 106756, "exec fuzz": 202921, "exec gen": 10656, "exec hints": 19049, "exec inject": 0, "exec minimize": 3155, "exec retries": 322, "exec seeds": 390, "exec smash": 3167, "exec total [base]": 199598, "exec total [new]": 472787, "exec triage": 45470, "executor restarts [base]": 870, "executor restarts [new]": 1948, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 3, "hints jobs": 0, "max signal": 97973, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1616, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14515, "no exec duration": 48708000000, "no exec requests": 222, "pending": 0, "prog exec time": 354, "reproducing": 1, "rpc recv": 23749445828, "rpc sent": 3194621120, "signal": 89763, "smash jobs": 0, "triage jobs": 1, "vm output": 37087523, "vm restarts [base]": 143, "vm restarts [new]": 323 } 2025/09/18 13:02:15 runner 4 connected 2025/09/18 13:02:17 runner 2 connected 2025/09/18 13:02:19 runner 8 connected 2025/09/18 13:02:23 runner 5 connected 2025/09/18 13:02:31 runner 7 connected 2025/09/18 13:02:41 base crash: lost connection to test machine 2025/09/18 13:02:55 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:03:00 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:03:20 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:03:29 runner 3 connected 2025/09/18 13:03:32 base crash: lost connection to test machine 2025/09/18 13:03:39 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:03:46 runner 4 connected 2025/09/18 13:03:51 runner 6 connected 2025/09/18 13:03:57 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 13:04:09 runner 7 connected 2025/09/18 13:04:15 base crash: INFO: rcu detected stall in sys_sendmsg 2025/09/18 13:04:22 runner 1 connected 2025/09/18 13:04:27 runner 9 connected 2025/09/18 13:04:47 runner 3 connected 2025/09/18 13:04:50 base crash: WARNING in xfrm_state_fini 2025/09/18 13:05:04 runner 2 connected 2025/09/18 13:05:05 base crash: lost connection to test machine 2025/09/18 13:05:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:05:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:05:39 runner 0 connected 2025/09/18 13:05:55 runner 1 connected 2025/09/18 13:06:22 runner 8 connected 2025/09/18 13:06:24 runner 6 connected 2025/09/18 13:06:29 base crash: WARNING in xfrm_state_fini 2025/09/18 13:06:30 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:06:33 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:06:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:07:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 44, "corpus": 13089, "corpus [files]": 14582, "corpus [symbols]": 9216, "cover overflows": 28182, "coverage": 92260, "distributor delayed": 18215, "distributor undelayed": 18215, "distributor violated": 29, "exec candidate": 30058, "exec collide": 110202, "exec fuzz": 209583, "exec gen": 10999, "exec hints": 19193, "exec inject": 0, "exec minimize": 3237, "exec retries": 333, "exec seeds": 402, "exec smash": 3243, "exec total [base]": 204250, "exec total [new]": 483621, "exec triage": 45528, "executor restarts [base]": 902, "executor restarts [new]": 2022, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 2, "max signal": 98000, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1658, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14534, "no exec duration": 48852000000, "no exec requests": 224, "pending": 0, "prog exec time": 499, "reproducing": 1, "rpc recv": 24478869372, "rpc sent": 3295036408, "signal": 89765, "smash jobs": 0, "triage jobs": 0, "vm output": 38367891, "vm restarts [base]": 148, "vm restarts [new]": 335 } 2025/09/18 13:07:18 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 13:07:18 runner 3 connected 2025/09/18 13:07:24 runner 2 connected 2025/09/18 13:07:24 runner 5 connected 2025/09/18 13:07:27 runner 7 connected 2025/09/18 13:07:57 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:08:05 base crash: WARNING in xfrm_state_fini 2025/09/18 13:08:07 runner 3 connected 2025/09/18 13:08:47 runner 9 connected 2025/09/18 13:08:55 runner 0 connected 2025/09/18 13:09:28 base crash: lost connection to test machine 2025/09/18 13:10:08 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 13:10:13 base crash: WARNING in xfrm_state_fini 2025/09/18 13:10:13 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:10:17 runner 1 connected 2025/09/18 13:10:22 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 13:10:30 patched crashed: INFO: rcu detected stall in smp_call_function [need repro = false] 2025/09/18 13:10:35 base crash: WARNING in xfrm_state_fini 2025/09/18 13:10:58 runner 9 connected 2025/09/18 13:11:03 runner 3 connected 2025/09/18 13:11:03 runner 6 connected 2025/09/18 13:11:11 runner 2 connected 2025/09/18 13:11:21 runner 3 connected 2025/09/18 13:11:24 runner 0 connected 2025/09/18 13:11:26 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:11:51 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:12:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 44, "corpus": 13089, "corpus [files]": 14583, "corpus [symbols]": 9217, "cover overflows": 29008, "coverage": 92262, "distributor delayed": 18234, "distributor undelayed": 18234, "distributor violated": 29, "exec candidate": 30058, "exec collide": 114140, "exec fuzz": 217306, "exec gen": 11433, "exec hints": 19322, "exec inject": 0, "exec minimize": 3243, "exec retries": 348, "exec seeds": 405, "exec smash": 3268, "exec total [base]": 209836, "exec total [new]": 495929, "exec triage": 45567, "executor restarts [base]": 935, "executor restarts [new]": 2086, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 5, "hints jobs": 0, "max signal": 98022, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1660, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14547, "no exec duration": 48852000000, "no exec requests": 224, "pending": 0, "prog exec time": 409, "reproducing": 1, "rpc recv": 25162923560, "rpc sent": 3405843296, "signal": 89766, "smash jobs": 0, "triage jobs": 0, "vm output": 39708127, "vm restarts [base]": 154, "vm restarts [new]": 343 } 2025/09/18 13:12:02 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:12:23 runner 8 connected 2025/09/18 13:12:31 base crash: lost connection to test machine 2025/09/18 13:12:40 runner 4 connected 2025/09/18 13:12:52 runner 9 connected 2025/09/18 13:12:59 base crash: WARNING in xfrm_state_fini 2025/09/18 13:13:16 base crash: INFO: rcu detected stall in sys_bpf 2025/09/18 13:13:19 runner 1 connected 2025/09/18 13:13:24 base crash "INFO: task hung in rdma_dev_change_netns" is already known 2025/09/18 13:13:24 patched crashed: INFO: task hung in rdma_dev_change_netns [need repro = false] 2025/09/18 13:13:48 runner 0 connected 2025/09/18 13:13:50 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:14:05 patched crashed: INFO: rcu detected stall in do_syscall_64 [need repro = false] 2025/09/18 13:14:06 runner 3 connected 2025/09/18 13:14:14 runner 2 connected 2025/09/18 13:14:39 runner 8 connected 2025/09/18 13:14:50 base crash: lost connection to test machine 2025/09/18 13:14:55 runner 3 connected 2025/09/18 13:15:19 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:15:22 base crash: WARNING in xfrm_state_fini 2025/09/18 13:15:42 runner 0 connected 2025/09/18 13:15:54 base crash: lost connection to test machine 2025/09/18 13:16:07 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:16:08 runner 5 connected 2025/09/18 13:16:10 runner 2 connected 2025/09/18 13:16:18 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:16:43 runner 1 connected 2025/09/18 13:16:44 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:16:53 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 13:16:56 runner 2 connected 2025/09/18 13:17:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 44, "corpus": 13091, "corpus [files]": 14585, "corpus [symbols]": 9220, "cover overflows": 29886, "coverage": 92271, "distributor delayed": 18253, "distributor undelayed": 18253, "distributor violated": 29, "exec candidate": 30058, "exec collide": 118593, "exec fuzz": 225687, "exec gen": 11854, "exec hints": 19461, "exec inject": 0, "exec minimize": 3331, "exec retries": 358, "exec seeds": 414, "exec smash": 3343, "exec total [base]": 215355, "exec total [new]": 509537, "exec triage": 45610, "executor restarts [base]": 966, "executor restarts [new]": 2138, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 4, "hints jobs": 0, "max signal": 98055, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1721, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14561, "no exec duration": 48863000000, "no exec requests": 226, "pending": 0, "prog exec time": 382, "reproducing": 1, "rpc recv": 25798392584, "rpc sent": 3520742416, "signal": 89775, "smash jobs": 0, "triage jobs": 0, "vm output": 40904051, "vm restarts [base]": 160, "vm restarts [new]": 351 } 2025/09/18 13:17:07 runner 6 connected 2025/09/18 13:17:32 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:17:32 runner 9 connected 2025/09/18 13:17:38 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:17:43 runner 8 connected 2025/09/18 13:17:47 base crash: WARNING in xfrm_state_fini 2025/09/18 13:17:59 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 13:18:07 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:18:11 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:18:21 runner 5 connected 2025/09/18 13:18:27 runner 2 connected 2025/09/18 13:18:38 runner 2 connected 2025/09/18 13:18:45 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:18:47 runner 3 connected 2025/09/18 13:18:56 runner 7 connected 2025/09/18 13:19:01 runner 6 connected 2025/09/18 13:19:15 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 13:19:33 runner 8 connected 2025/09/18 13:20:04 runner 0 connected 2025/09/18 13:20:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:20:37 patched crashed: INFO: rcu detected stall in corrupted [need repro = false] 2025/09/18 13:20:42 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:21:07 base crash: lost connection to test machine 2025/09/18 13:21:25 runner 9 connected 2025/09/18 13:21:26 runner 2 connected 2025/09/18 13:21:32 runner 5 connected 2025/09/18 13:21:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:21:42 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 13:21:58 runner 3 connected 2025/09/18 13:22:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 44, "corpus": 13091, "corpus [files]": 14585, "corpus [symbols]": 9220, "cover overflows": 30629, "coverage": 92271, "distributor delayed": 18276, "distributor undelayed": 18276, "distributor violated": 29, "exec candidate": 30058, "exec collide": 122510, "exec fuzz": 232805, "exec gen": 12228, "exec hints": 19461, "exec inject": 0, "exec minimize": 3331, "exec retries": 373, "exec seeds": 414, "exec smash": 3343, "exec total [base]": 222255, "exec total [new]": 520996, "exec triage": 45652, "executor restarts [base]": 995, "executor restarts [new]": 2205, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 98098, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1721, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14575, "no exec duration": 49003000000, "no exec requests": 229, "pending": 0, "prog exec time": 332, "reproducing": 1, "rpc recv": 26553444600, "rpc sent": 3634677544, "signal": 89775, "smash jobs": 0, "triage jobs": 0, "vm output": 42160530, "vm restarts [base]": 164, "vm restarts [new]": 362 } 2025/09/18 13:22:23 runner 6 connected 2025/09/18 13:22:31 runner 4 connected 2025/09/18 13:22:44 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:22:54 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:23:09 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:23:12 base crash: INFO: rcu detected stall in sys_socket 2025/09/18 13:23:35 runner 8 connected 2025/09/18 13:23:36 patched crashed: KASAN: slab-use-after-free Read in __xfrm_state_lookup [need repro = false] 2025/09/18 13:23:38 patched crashed: INFO: rcu detected stall in sys_socket [need repro = false] 2025/09/18 13:23:44 runner 9 connected 2025/09/18 13:23:57 runner 3 connected 2025/09/18 13:24:01 base crash: WARNING in xfrm_state_fini 2025/09/18 13:24:01 runner 1 connected 2025/09/18 13:24:20 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:24:25 base crash: WARNING in xfrm_state_fini 2025/09/18 13:24:25 runner 2 connected 2025/09/18 13:24:26 runner 7 connected 2025/09/18 13:24:51 runner 2 connected 2025/09/18 13:25:07 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:25:11 runner 6 connected 2025/09/18 13:25:13 runner 0 connected 2025/09/18 13:25:56 runner 4 connected 2025/09/18 13:26:24 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:26:30 base crash: WARNING in xfrm_state_fini 2025/09/18 13:26:42 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:26:46 base crash: WARNING in xfrm_state_fini 2025/09/18 13:27:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 44, "corpus": 13095, "corpus [files]": 14589, "corpus [symbols]": 9223, "cover overflows": 31496, "coverage": 92275, "distributor delayed": 18296, "distributor undelayed": 18296, "distributor violated": 29, "exec candidate": 30058, "exec collide": 126719, "exec fuzz": 241032, "exec gen": 12665, "exec hints": 19935, "exec inject": 0, "exec minimize": 3394, "exec retries": 381, "exec seeds": 426, "exec smash": 3443, "exec total [base]": 229386, "exec total [new]": 534574, "exec triage": 45703, "executor restarts [base]": 1018, "executor restarts [new]": 2259, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 2, "max signal": 98143, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1760, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14593, "no exec duration": 49011000000, "no exec requests": 231, "pending": 0, "prog exec time": 360, "reproducing": 1, "rpc recv": 27254690056, "rpc sent": 3761470312, "signal": 89779, "smash jobs": 0, "triage jobs": 0, "vm output": 43342440, "vm restarts [base]": 167, "vm restarts [new]": 371 } 2025/09/18 13:27:07 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:27:13 runner 7 connected 2025/09/18 13:27:19 runner 3 connected 2025/09/18 13:27:25 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:27:31 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:27:32 runner 5 connected 2025/09/18 13:27:35 runner 1 connected 2025/09/18 13:27:57 runner 9 connected 2025/09/18 13:28:14 runner 2 connected 2025/09/18 13:28:22 runner 3 connected 2025/09/18 13:28:30 base crash: lost connection to test machine 2025/09/18 13:28:35 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:29:18 base crash: KASAN: slab-use-after-free Read in xfrm_alloc_spi 2025/09/18 13:29:19 runner 0 connected 2025/09/18 13:29:25 runner 8 connected 2025/09/18 13:29:46 base crash: WARNING in xfrm_state_fini 2025/09/18 13:30:01 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:30:06 runner 3 connected 2025/09/18 13:30:37 runner 2 connected 2025/09/18 13:30:50 runner 7 connected 2025/09/18 13:30:58 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:31:18 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:31:21 base crash: KASAN: slab-use-after-free Read in __xfrm_state_lookup 2025/09/18 13:31:48 runner 6 connected 2025/09/18 13:32:00 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 13097, "corpus [files]": 14591, "corpus [symbols]": 9225, "cover overflows": 32585, "coverage": 92277, "distributor delayed": 18328, "distributor undelayed": 18328, "distributor violated": 29, "exec candidate": 30058, "exec collide": 131339, "exec fuzz": 249764, "exec gen": 13095, "exec hints": 20475, "exec inject": 0, "exec minimize": 3441, "exec retries": 389, "exec seeds": 432, "exec smash": 3473, "exec total [base]": 236154, "exec total [new]": 549050, "exec triage": 45765, "executor restarts [base]": 1057, "executor restarts [new]": 2326, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 1, "max signal": 98195, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1787, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 14614, "no exec duration": 49132000000, "no exec requests": 232, "pending": 0, "prog exec time": 316, "reproducing": 1, "rpc recv": 27943354388, "rpc sent": 3885978280, "signal": 89781, "smash jobs": 0, "triage jobs": 1, "vm output": 44688386, "vm restarts [base]": 172, "vm restarts [new]": 379 } 2025/09/18 13:32:08 runner 9 connected 2025/09/18 13:32:10 runner 0 connected 2025/09/18 13:32:28 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:32:36 patched crashed: INFO: rcu detected stall in smp_call_function [need repro = false] 2025/09/18 13:32:43 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:33:17 runner 8 connected 2025/09/18 13:33:19 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2025/09/18 13:33:22 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:33:26 runner 5 connected 2025/09/18 13:33:28 base crash: lost connection to test machine 2025/09/18 13:33:33 runner 3 connected 2025/09/18 13:33:38 base crash: WARNING in xfrm_state_fini 2025/09/18 13:33:46 base crash: WARNING in xfrm_state_fini 2025/09/18 13:34:00 patched crashed: KASAN: slab-use-after-free Read in xfrm_alloc_spi [need repro = false] 2025/09/18 13:34:08 runner 2 connected 2025/09/18 13:34:12 runner 7 connected 2025/09/18 13:34:18 runner 0 connected 2025/09/18 13:34:26 runner 1 connected 2025/09/18 13:34:35 runner 3 connected 2025/09/18 13:34:49 runner 6 connected 2025/09/18 13:35:07 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:35:34 base crash: WARNING in xfrm_state_fini 2025/09/18 13:35:55 runner 2 connected 2025/09/18 13:35:56 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:36:10 base crash: WARNING in xfrm_state_fini 2025/09/18 13:36:12 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:36:14 patched crashed: WARNING in xfrm_state_fini [need repro = false] 2025/09/18 13:36:20 patched crashed: INFO: rcu detected stall in futex [need repro = false] 2025/09/18 13:36:21 patched crashed: lost connection to test machine [need repro = false] 2025/09/18 13:36:22 runner 2 connected 2025/09/18 13:36:44 runner 9 connected 2025/09/18 13:36:57 bug reporting terminated 2025/09/18 13:36:57 status reporting terminated 2025/09/18 13:36:58 syz-diff (base): kernel context loop terminated 2025/09/18 13:38:19 repro finished 'INFO: task hung in nfsd_nl_threads_get_doit', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/09/18 13:38:19 syz-diff (new): kernel context loop terminated 2025/09/18 13:38:19 diff fuzzing terminated 2025/09/18 13:38:19 fuzzing is finished 2025/09/18 13:38:19 status at the end: Title On-Base On-Patched INFO: rcu detected stall in __sock_create 1 crashes INFO: rcu detected stall in corrupted 1 crashes 12 crashes INFO: rcu detected stall in do_syscall_64 1 crashes INFO: rcu detected stall in futex 3 crashes 10 crashes INFO: rcu detected stall in genl_dumpit 1 crashes INFO: rcu detected stall in ieee80211_handle_queued_frames 1 crashes INFO: rcu detected stall in mac80211_hwsim_beacon 1 crashes INFO: rcu detected stall in netlink_deliver_tap 1 crashes INFO: rcu detected stall in perf_event_open 4 crashes INFO: rcu detected stall in perf_ioctl 1 crashes INFO: rcu detected stall in rtnl_dumpit 1 crashes INFO: rcu detected stall in rtnl_newlink 1 crashes 1 crashes INFO: rcu detected stall in security_file_ioctl 3 crashes INFO: rcu detected stall in smp_call_function 2 crashes 3 crashes INFO: rcu detected stall in sys_bpf 3 crashes 2 crashes INFO: rcu detected stall in sys_clone 1 crashes INFO: rcu detected stall in sys_openat 1 crashes 1 crashes INFO: rcu detected stall in sys_sendmsg 1 crashes INFO: rcu detected stall in sys_socket 1 crashes 5 crashes INFO: rcu detected stall in task_work_add 1 crashes INFO: task hung in nfsd_nl_threads_get_doit 1 crashes INFO: task hung in nfsd_nl_threads_set_doit 1 crashes INFO: task hung in perf_tp_event_init 1 crashes INFO: task hung in rdma_dev_change_netns 2 crashes INFO: task hung in reg_check_chans_work 1 crashes KASAN: slab-use-after-free Read in __xfrm_state_insert 1 crashes KASAN: slab-use-after-free Read in __xfrm_state_lookup 17 crashes 43 crashes KASAN: slab-use-after-free Read in xfrm_alloc_spi 20 crashes 41 crashes KASAN: slab-use-after-free Read in xfrm_state_find 1 crashes KASAN: slab-use-after-free Write in __xfrm_state_delete 2 crashes 6 crashes KFENCE: use-after-free read in xfrm_alloc_spi 1 crashes SYZFAIL: repeatedly failed to execute the program 1 crashes WARNING in reg_bounds_sanity_check 1 crashes 9 crashes WARNING in xfrm6_tunnel_net_exit 1 crashes 3 crashes WARNING in xfrm_state_fini 66 crashes 139 crashes general protection fault in __xfrm_state_insert 1 crashes 2 crashes lost connection to test machine 38 crashes 73 crashes no output from test machine 1 crashes 3 crashes unregister_netdevice: waiting for DEV to become free 6 crashes 9 crashes