> > Have you looked into /dev/kcov. This is used by SYZKALLER for getting > > coverage information from the kernel. > > > That's part of Matt Macy's gcov project, right?. No, /dev/kcov is independent of, and predates, Matt Macy's work. It provides broadly the same sort of information, but not using the same interface.