Necip Fazil Yildiran

sys/linux/dev_snd_control: support using existing kctls

3

Drivers can register hundreds of potentially interesting custom controls, which cannot be captured with the existing small range of numids (0:10). Add a pseudo-syscall (syz_sndrv_get_elem_id()) to retrieve existing control numids....

pkg/host: incorrect module address in /modules

3

**Describe the bug** syzkaller obtains the module addresses from `/proc/modules` (see [pkg/host/machine_info_linux.go](https://github.com/google/syzkaller/blob/master/pkg/host/machine_info_linux.go#L129)), which is then used as PC offset while generating human-readable coverage reports. While syzkaller needs `.text`'s address, `/proc/modules`...

The address from /proc/modules is not necessarily the address of .text, e.g., can be the address of .plt. If available, fix up the module address using the address from /sys/module//sections/.text...

Use the same values for non-boolean/tristate options when approximating

2

For example: ``` # go to linux git copy git checkout -f v5.13 make.cross ARCH=x86_64 allnoconfig cp .config allno cat allno | grep CONFIG_DEFAULT_MMAP_MIN_ADDR # outputs CONFIG_DEFAULT_MMAP_MIN_ADDR=4096 klocalizer -a x86_64...

`Klocalizer.get_config_from_model()` takes long (longer than the SAT check z3 spends for creating the model). This is not necessarily a bug but unintuitive to me; therefore, I will check if there...

To reproduce: ``` git checkout 8594c3b85171 git show > patch2.diff klocalizer --include patch2.diff --repair allnoconfig -a arm64 ``` Output: ``` klocalizer, kmax 4.2 INFO: Diff file was given as input...

kismet/kclause: false alarm in kismet due to incorrect representation of inequality constraints in kclause

2

Reproduce: ``` git checkout e9c5048c2de1913d0bcd589bc1487810c2e24bc1 kismet --selectees CONFIG_CRYPTO_DEV_FSL_CAAM_BLOB_GEN --selectors CONFIG_TRUSTED_KEYS_CAAM -a=arm64 ``` The false alarm happens due to a constraint that involves inequality between options. See the following configuration option...

For a patch in Linux kernel x86_64 v5.13 patches, krepair terminates due to a z3 failure. Here is the error message (tail of klocalizer stderr): ``` DEBUG: SuperC config creation...

For 24 (patch, builtin config file) pairs of Linux kernel x86_64 v5.13 patches, krepair asserts while creating SuperC config files. The tail of klocalizer output is: ``` DEBUG: Creating the...

For 1,432 (patch, builtin config file) pairs of Linux kernel x86_64 v5.13 patches, krepair cannot find repaired configurations with following error message (last line of klocalizer stderr): ``` ERROR: No...