1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
{
"name": "base",
"target": "linux/amd64",
"http": "",
"rpc": ":0",
"workdir": "/workdir",
"kernel_obj": "/base/obj",
"kernel_build_src": "/workdir",
"android_split_build": false,
"image": "/base/image",
"ssh_user": "root",
"syzkaller": "/syzkaller",
"procs": 3,
"max_crash_logs": 100,
"sandbox": "none",
"sandbox_arg": 0,
"snapshot": false,
"cover": true,
"cover_filter": {},
"raw_cover": false,
"reproduce": true,
"preserve_corpus": true,
"enable_syscalls": [
"accept",
"accept4",
"bind",
"close",
"connect",
"epoll_create",
"epoll_create1",
"epoll_ctl",
"epoll_pwait",
"epoll_wait",
"getpeername",
"getsockname",
"getsockopt",
"ioctl",
"listen",
"mmap",
"poll",
"ppoll",
"pread64",
"preadv",
"pselect6",
"pwrite64",
"pwritev",
"read",
"readv",
"recvfrom",
"recvmmsg",
"recvmsg",
"select",
"sendfile",
"sendmmsg",
"sendmsg",
"sendto",
"setsockopt",
"shutdown",
"socket",
"socketpair",
"splice",
"vmsplice",
"write",
"writev",
"tee",
"bpf",
"getpid",
"getgid",
"getuid",
"gettid",
"unshare",
"pipe",
"syz_emit_ethernet",
"syz_extract_tcp_res",
"syz_genetlink_get_family_id",
"syz_init_net_socket",
"mkdirat$cgroup*",
"openat$cgroup*",
"write$cgroup*",
"clock_gettime",
"bpf",
"openat$tun",
"openat$ppp",
"syz_open_procfs$namespace",
"syz_80211_*",
"nanosleep",
"openat$nci",
"ioctl$IOCTL_GET_NCIDEV_IDX",
"openat$rfkill",
"openat$6lowpan*",
"openat$pidfd",
"openat$tcp*",
"openat$vhost_vsock",
"openat$ptp*",
"ioctl$PTP*"
],
"strace_bin": "",
"strace_bin_on_target": false,
"execprog_bin_on_target": "",
"executor_bin_on_target": "",
"run_fsck": true,
"type": "qemu",
"vm": {
"count": 3,
"cmdline": "root=/dev/sda1",
"kernel": "/base/kernel",
"cpu": 2,
"mem": 7168,
"qemu_args": "-machine q35 -enable-kvm -smp 2,sockets=2,cores=1"
},
"asset_storage": null,
"Experimental": {
"reset_acc_state": false,
"remote_cover": true,
"cover_edges": false,
"descriptions_mode": "manual"
}
}
|