2025/09/02 09:10:17 extracted 327254 text symbol hashes for base and 327254 for patched 2025/09/02 09:10:17 binaries are different, continuing fuzzing 2025/09/02 09:10:17 adding modified_functions to focus areas: ["kvm_gmem_fallocate"] 2025/09/02 09:10:17 adding directly modified files to focus areas: ["virt/kvm/guest_memfd.c"] 2025/09/02 09:10:18 downloaded the corpus from https://storage.googleapis.com/syzkaller/corpus/ci-upstream-kasan-gce-root-corpus.db 2025/09/02 09:11:15 runner 2 connected 2025/09/02 09:11:16 runner 3 connected 2025/09/02 09:11:16 runner 8 connected 2025/09/02 09:11:16 runner 5 connected 2025/09/02 09:11:16 runner 9 connected 2025/09/02 09:11:16 runner 7 connected 2025/09/02 09:11:16 runner 4 connected 2025/09/02 09:11:16 runner 2 connected 2025/09/02 09:11:16 runner 1 connected 2025/09/02 09:11:16 runner 6 connected 2025/09/02 09:11:16 runner 1 connected 2025/09/02 09:11:16 runner 3 connected 2025/09/02 09:11:23 runner 0 connected 2025/09/02 09:11:23 initializing coverage information... 2025/09/02 09:11:23 executor cover filter: 0 PCs 2025/09/02 09:11:23 runner 0 connected 2025/09/02 09:11:25 machine check: disabled the following syscalls: openat$sev : failed to open /dev/sev: no such file or directory syz_kvm_setup_cpu$ppc64 : unsupported arch transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] ioctl$KVM_CAP_SGX_ATTRIBUTE : fd_sgx_provision [openat$sgx_provision] ioctl$KVM_SEV_CERT_EXPORT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_DECRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_ENCRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_ES_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_GET_ATTESTATION_REPORT : fd_sev [openat$sev] ioctl$KVM_SEV_GUEST_STATUS : fd_sev [openat$sev] ioctl$KVM_SEV_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_INIT2 : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_MEASURE : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_SECRET : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_LAUNCH_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_RECEIVE_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_CANCEL : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_START : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_START : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_UPDATE : fd_sev [openat$sev] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 165/8054 2025/09/02 09:11:25 base: machine check complete 2025/09/02 09:11:28 discovered 7699 source files, 338653 symbols 2025/09/02 09:11:28 coverage filter: kvm_gmem_fallocate: [kvm_gmem_fallocate] 2025/09/02 09:11:28 coverage filter: virt/kvm/guest_memfd.c: [virt/kvm/guest_memfd.c] 2025/09/02 09:11:28 area "symbols": 40 PCs in the cover filter 2025/09/02 09:11:28 area "files": 210 PCs in the cover filter 2025/09/02 09:11:28 area "": 0 PCs in the cover filter 2025/09/02 09:11:28 executor cover filter: 0 PCs 2025/09/02 09:11:30 machine check: disabled the following syscalls: openat$sev : failed to open /dev/sev: no such file or directory syz_kvm_setup_cpu$ppc64 : unsupported arch transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] ioctl$KVM_CAP_SGX_ATTRIBUTE : fd_sgx_provision [openat$sgx_provision] ioctl$KVM_SEV_CERT_EXPORT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_DECRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_ENCRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_ES_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_GET_ATTESTATION_REPORT : fd_sev [openat$sev] ioctl$KVM_SEV_GUEST_STATUS : fd_sev [openat$sev] ioctl$KVM_SEV_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_INIT2 : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_MEASURE : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_SECRET : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_LAUNCH_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_RECEIVE_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_CANCEL : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_START : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_START : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_UPDATE : fd_sev [openat$sev] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 165/8054 2025/09/02 09:11:30 new: machine check complete 2025/09/02 09:11:33 new: adding 2248 seeds 2025/09/02 09:11:49 triaged 97.2% of the corpus 2025/09/02 09:11:49 starting bug reproductions 2025/09/02 09:11:49 starting bug reproductions (max 10 VMs, 7 repros) 2025/09/02 09:12:19 triaged 100.0% of the corpus 2025/09/02 09:15:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 1, "corpus": 709, "corpus [files]": 5, "corpus [symbols]": 0, "cover overflows": 0, "coverage": 9215, "distributor delayed": 366, "distributor undelayed": 366, "distributor violated": 0, "exec candidate": 2248, "exec collide": 4574, "exec fuzz": 8710, "exec gen": 447, "exec hints": 1305, "exec inject": 0, "exec minimize": 8878, "exec retries": 0, "exec seeds": 2031, "exec smash": 10111, "exec total [base]": 20571, "exec total [new]": 46905, "exec triage": 1915, "executor restarts [base]": 32, "executor restarts [new]": 52, "fault jobs": 0, "fuzzer jobs": 721, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 108, "max signal": 9571, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 4812, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 816, "no exec duration": 22000000000, "no exec requests": 22, "pending": 0, "prog exec time": 214, "reproducing": 0, "rpc recv": 1391323040, "rpc sent": 65525608, "signal": 8401, "smash jobs": 607, "triage jobs": 6, "vm output": 199007, "vm restarts [base]": 4, "vm restarts [new]": 10 } 2025/09/02 09:20:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 21, "corpus": 1010, "corpus [files]": 7, "corpus [symbols]": 0, "cover overflows": 6, "coverage": 11858, "distributor delayed": 513, "distributor undelayed": 513, "distributor violated": 0, "exec candidate": 2248, "exec collide": 10113, "exec fuzz": 19187, "exec gen": 1030, "exec hints": 3796, "exec inject": 0, "exec minimize": 13869, "exec retries": 0, "exec seeds": 3006, "exec smash": 23236, "exec total [base]": 36202, "exec total [new]": 85878, "exec triage": 2709, "executor restarts [base]": 32, "executor restarts [new]": 52, "fault jobs": 0, "fuzzer jobs": 246, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 65, "max signal": 12231, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 7170, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1166, "no exec duration": 22000000000, "no exec requests": 22, "pending": 0, "prog exec time": 249, "reproducing": 0, "rpc recv": 2528264024, "rpc sent": 153956592, "signal": 11341, "smash jobs": 174, "triage jobs": 7, "vm output": 411265, "vm restarts [base]": 4, "vm restarts [new]": 10 } 2025/09/02 09:25:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 31, "corpus": 1223, "corpus [files]": 8, "corpus [symbols]": 0, "cover overflows": 24, "coverage": 12565, "distributor delayed": 602, "distributor undelayed": 602, "distributor violated": 0, "exec candidate": 2248, "exec collide": 16902, "exec fuzz": 32380, "exec gen": 1684, "exec hints": 8023, "exec inject": 0, "exec minimize": 17240, "exec retries": 0, "exec seeds": 3666, "exec smash": 30420, "exec total [base]": 50805, "exec total [new]": 122485, "exec triage": 3238, "executor restarts [base]": 32, "executor restarts [new]": 52, "fault jobs": 0, "fuzzer jobs": 31, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 11, "max signal": 13027, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 8732, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1410, "no exec duration": 22000000000, "no exec requests": 22, "pending": 0, "prog exec time": 231, "reproducing": 0, "rpc recv": 3569475392, "rpc sent": 244958112, "signal": 12001, "smash jobs": 12, "triage jobs": 8, "vm output": 758760, "vm restarts [base]": 4, "vm restarts [new]": 10 } 2025/09/02 09:28:46 base crash "KASAN: slab-use-after-free Write in kvm_gmem_release" is already known 2025/09/02 09:28:46 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 09:29:43 runner 9 connected 2025/09/02 09:30:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 34, "corpus": 1307, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 52, "coverage": 12851, "distributor delayed": 649, "distributor undelayed": 649, "distributor violated": 0, "exec candidate": 2248, "exec collide": 26353, "exec fuzz": 50187, "exec gen": 2672, "exec hints": 9556, "exec inject": 0, "exec minimize": 18685, "exec retries": 0, "exec seeds": 3923, "exec smash": 32599, "exec total [base]": 64759, "exec total [new]": 156369, "exec triage": 3462, "executor restarts [base]": 32, "executor restarts [new]": 55, "fault jobs": 0, "fuzzer jobs": 20, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 4, "max signal": 13349, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 9392, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1508, "no exec duration": 22000000000, "no exec requests": 22, "pending": 0, "prog exec time": 322, "reproducing": 0, "rpc recv": 4355672060, "rpc sent": 336672384, "signal": 12280, "smash jobs": 9, "triage jobs": 7, "vm output": 1006338, "vm restarts [base]": 4, "vm restarts [new]": 11 } 2025/09/02 09:35:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 43, "corpus": 1409, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 71, "coverage": 13152, "distributor delayed": 700, "distributor undelayed": 700, "distributor violated": 0, "exec candidate": 2248, "exec collide": 35728, "exec fuzz": 68025, "exec gen": 3561, "exec hints": 10770, "exec inject": 0, "exec minimize": 20375, "exec retries": 0, "exec seeds": 4236, "exec smash": 35300, "exec total [base]": 78501, "exec total [new]": 190669, "exec triage": 3742, "executor restarts [base]": 32, "executor restarts [new]": 55, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 2, "max signal": 13679, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10187, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1630, "no exec duration": 22000000000, "no exec requests": 22, "pending": 0, "prog exec time": 369, "reproducing": 0, "rpc recv": 5172275584, "rpc sent": 432000664, "signal": 12564, "smash jobs": 0, "triage jobs": 4, "vm output": 1225302, "vm restarts [base]": 4, "vm restarts [new]": 11 } 2025/09/02 09:40:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 47, "corpus": 1489, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 85, "coverage": 13386, "distributor delayed": 735, "distributor undelayed": 735, "distributor violated": 0, "exec candidate": 2248, "exec collide": 45410, "exec fuzz": 86484, "exec gen": 4542, "exec hints": 11737, "exec inject": 0, "exec minimize": 21727, "exec retries": 0, "exec seeds": 4488, "exec smash": 37358, "exec total [base]": 91977, "exec total [new]": 224623, "exec triage": 3945, "executor restarts [base]": 32, "executor restarts [new]": 55, "fault jobs": 0, "fuzzer jobs": 7, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 2, "max signal": 13912, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10844, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1721, "no exec duration": 22000000000, "no exec requests": 22, "pending": 0, "prog exec time": 249, "reproducing": 0, "rpc recv": 5921658824, "rpc sent": 528073688, "signal": 12781, "smash jobs": 5, "triage jobs": 0, "vm output": 1429725, "vm restarts [base]": 4, "vm restarts [new]": 11 } 2025/09/02 09:42:19 fuzzer has reached the modified code (0 + 13 + 0), continuing fuzzing 2025/09/02 09:45:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 49, "corpus": 1551, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 109, "coverage": 13549, "distributor delayed": 759, "distributor undelayed": 759, "distributor violated": 0, "exec candidate": 2248, "exec collide": 55355, "exec fuzz": 105433, "exec gen": 5557, "exec hints": 11995, "exec inject": 0, "exec minimize": 22928, "exec retries": 0, "exec seeds": 4680, "exec smash": 38921, "exec total [base]": 105068, "exec total [new]": 257914, "exec triage": 4115, "executor restarts [base]": 33, "executor restarts [new]": 55, "fault jobs": 0, "fuzzer jobs": 13, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 1, "max signal": 14098, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 11410, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1799, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 271, "reproducing": 0, "rpc recv": 6648456824, "rpc sent": 623557648, "signal": 12936, "smash jobs": 7, "triage jobs": 5, "vm output": 1637089, "vm restarts [base]": 4, "vm restarts [new]": 11 } 2025/09/02 09:46:10 base crash "KASAN: slab-use-after-free Write in kvm_gmem_release" is already known 2025/09/02 09:46:10 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 09:46:21 base crash "KASAN: slab-use-after-free Write in kvm_gmem_release" is already known 2025/09/02 09:46:21 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 09:47:07 runner 6 connected 2025/09/02 09:47:17 runner 7 connected 2025/09/02 09:50:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 49, "corpus": 1606, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 129, "coverage": 13662, "distributor delayed": 773, "distributor undelayed": 773, "distributor violated": 0, "exec candidate": 2248, "exec collide": 64717, "exec fuzz": 123304, "exec gen": 6444, "exec hints": 12407, "exec inject": 0, "exec minimize": 23688, "exec retries": 0, "exec seeds": 4844, "exec smash": 40310, "exec total [base]": 117377, "exec total [new]": 288875, "exec triage": 4233, "executor restarts [base]": 33, "executor restarts [new]": 61, "fault jobs": 0, "fuzzer jobs": 10, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 1, "max signal": 14207, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 11761, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1856, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 254, "reproducing": 0, "rpc recv": 7364360576, "rpc sent": 712670520, "signal": 13040, "smash jobs": 6, "triage jobs": 3, "vm output": 1897771, "vm restarts [base]": 4, "vm restarts [new]": 13 } 2025/09/02 09:50:40 base crash: lost connection to test machine 2025/09/02 09:51:29 runner 2 connected 2025/09/02 09:55:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 49, "corpus": 1649, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 153, "coverage": 13808, "distributor delayed": 801, "distributor undelayed": 801, "distributor violated": 0, "exec candidate": 2248, "exec collide": 74790, "exec fuzz": 142726, "exec gen": 7471, "exec hints": 12746, "exec inject": 0, "exec minimize": 24332, "exec retries": 0, "exec seeds": 4972, "exec smash": 41398, "exec total [base]": 129482, "exec total [new]": 321712, "exec triage": 4342, "executor restarts [base]": 36, "executor restarts [new]": 61, "fault jobs": 0, "fuzzer jobs": 8, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 2, "max signal": 14348, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 12060, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1906, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 268, "reproducing": 0, "rpc recv": 8032001820, "rpc sent": 804653472, "signal": 13165, "smash jobs": 4, "triage jobs": 2, "vm output": 2125186, "vm restarts [base]": 5, "vm restarts [new]": 13 } 2025/09/02 10:00:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 55, "corpus": 1682, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 183, "coverage": 13871, "distributor delayed": 817, "distributor undelayed": 817, "distributor violated": 0, "exec candidate": 2248, "exec collide": 85049, "exec fuzz": 162159, "exec gen": 8524, "exec hints": 12869, "exec inject": 0, "exec minimize": 24883, "exec retries": 0, "exec seeds": 5073, "exec smash": 42243, "exec total [base]": 142283, "exec total [new]": 354162, "exec triage": 4431, "executor restarts [base]": 36, "executor restarts [new]": 61, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 14417, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 12319, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1945, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 267, "reproducing": 0, "rpc recv": 8672550648, "rpc sent": 897048768, "signal": 13226, "smash jobs": 3, "triage jobs": 1, "vm output": 2351304, "vm restarts [base]": 5, "vm restarts [new]": 13 } 2025/09/02 10:05:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 55, "corpus": 1716, "corpus [files]": 13, "corpus [symbols]": 0, "cover overflows": 201, "coverage": 13968, "distributor delayed": 826, "distributor undelayed": 826, "distributor violated": 0, "exec candidate": 2248, "exec collide": 95236, "exec fuzz": 181500, "exec gen": 9557, "exec hints": 12966, "exec inject": 0, "exec minimize": 25563, "exec retries": 0, "exec seeds": 5179, "exec smash": 43115, "exec total [base]": 155028, "exec total [new]": 386569, "exec triage": 4519, "executor restarts [base]": 36, "executor restarts [new]": 61, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 1, "max signal": 14529, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 12635, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1987, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 281, "reproducing": 0, "rpc recv": 9329845040, "rpc sent": 992512384, "signal": 13327, "smash jobs": 3, "triage jobs": 5, "vm output": 2570536, "vm restarts [base]": 5, "vm restarts [new]": 13 } 2025/09/02 10:10:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 55, "corpus": 1754, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 212, "coverage": 14155, "distributor delayed": 841, "distributor undelayed": 841, "distributor violated": 0, "exec candidate": 2248, "exec collide": 105243, "exec fuzz": 200713, "exec gen": 10605, "exec hints": 13552, "exec inject": 0, "exec minimize": 26199, "exec retries": 0, "exec seeds": 5292, "exec smash": 44086, "exec total [base]": 167889, "exec total [new]": 419235, "exec triage": 4616, "executor restarts [base]": 36, "executor restarts [new]": 61, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 1, "max signal": 14713, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 12931, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2030, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 288, "reproducing": 0, "rpc recv": 9993357956, "rpc sent": 1087055128, "signal": 13509, "smash jobs": 2, "triage jobs": 2, "vm output": 2810577, "vm restarts [base]": 5, "vm restarts [new]": 13 } 2025/09/02 10:12:12 runner 5 connected 2025/09/02 10:12:12 runner 1 connected 2025/09/02 10:12:12 runner 3 connected 2025/09/02 10:12:12 runner 1 connected 2025/09/02 10:12:12 runner 8 connected 2025/09/02 10:12:12 runner 3 connected 2025/09/02 10:12:12 runner 4 connected 2025/09/02 10:12:13 runner 2 connected 2025/09/02 10:12:19 runner 0 connected 2025/09/02 10:12:19 runner 0 connected 2025/09/02 10:15:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 55, "corpus": 1782, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 221, "coverage": 14223, "distributor delayed": 856, "distributor undelayed": 856, "distributor violated": 0, "exec candidate": 2248, "exec collide": 113399, "exec fuzz": 216557, "exec gen": 11382, "exec hints": 13630, "exec inject": 0, "exec minimize": 26676, "exec retries": 0, "exec seeds": 5379, "exec smash": 44764, "exec total [base]": 178041, "exec total [new]": 445441, "exec triage": 4704, "executor restarts [base]": 45, "executor restarts [new]": 82, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 14794, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13137, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2065, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 311, "reproducing": 0, "rpc recv": 10857453536, "rpc sent": 1167492680, "signal": 13575, "smash jobs": 5, "triage jobs": 1, "vm output": 3119827, "vm restarts [base]": 8, "vm restarts [new]": 20 } 2025/09/02 10:20:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 60, "corpus": 1818, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 280, "coverage": 14307, "distributor delayed": 869, "distributor undelayed": 869, "distributor violated": 0, "exec candidate": 2248, "exec collide": 123077, "exec fuzz": 235182, "exec gen": 12362, "exec hints": 13982, "exec inject": 0, "exec minimize": 27256, "exec retries": 0, "exec seeds": 5490, "exec smash": 45750, "exec total [base]": 190433, "exec total [new]": 476840, "exec triage": 4792, "executor restarts [base]": 45, "executor restarts [new]": 82, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 14876, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13392, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2105, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 270, "reproducing": 0, "rpc recv": 11529805812, "rpc sent": 1261902456, "signal": 13658, "smash jobs": 0, "triage jobs": 0, "vm output": 3342574, "vm restarts [base]": 8, "vm restarts [new]": 20 } 2025/09/02 10:25:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 62, "corpus": 1834, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 345, "coverage": 14372, "distributor delayed": 880, "distributor undelayed": 880, "distributor violated": 0, "exec candidate": 2248, "exec collide": 133303, "exec fuzz": 254734, "exec gen": 13436, "exec hints": 13999, "exec inject": 0, "exec minimize": 27577, "exec retries": 0, "exec seeds": 5538, "exec smash": 46119, "exec total [base]": 202793, "exec total [new]": 508506, "exec triage": 4847, "executor restarts [base]": 45, "executor restarts [new]": 82, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 14937, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13532, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2128, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 287, "reproducing": 0, "rpc recv": 12149444332, "rpc sent": 1358918616, "signal": 13710, "smash jobs": 2, "triage jobs": 1, "vm output": 3581423, "vm restarts [base]": 8, "vm restarts [new]": 20 } 2025/09/02 10:30:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 64, "corpus": 1854, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 394, "coverage": 14417, "distributor delayed": 893, "distributor undelayed": 893, "distributor violated": 0, "exec candidate": 2248, "exec collide": 143451, "exec fuzz": 273754, "exec gen": 14389, "exec hints": 14145, "exec inject": 0, "exec minimize": 27928, "exec retries": 0, "exec seeds": 5598, "exec smash": 46650, "exec total [base]": 215241, "exec total [new]": 539765, "exec triage": 4901, "executor restarts [base]": 45, "executor restarts [new]": 82, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 9, "hints jobs": 0, "max signal": 14985, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13715, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2152, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 271, "reproducing": 0, "rpc recv": 12793098088, "rpc sent": 1454373720, "signal": 13747, "smash jobs": 0, "triage jobs": 2, "vm output": 3796361, "vm restarts [base]": 8, "vm restarts [new]": 20 } 2025/09/02 10:30:39 runner 9 connected 2025/09/02 10:35:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 66, "corpus": 1879, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 483, "coverage": 14507, "distributor delayed": 913, "distributor undelayed": 913, "distributor violated": 0, "exec candidate": 2248, "exec collide": 153505, "exec fuzz": 292497, "exec gen": 15370, "exec hints": 14208, "exec inject": 0, "exec minimize": 28434, "exec retries": 0, "exec seeds": 5670, "exec smash": 47232, "exec total [base]": 227584, "exec total [new]": 570851, "exec triage": 4981, "executor restarts [base]": 45, "executor restarts [new]": 85, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 3, "max signal": 15104, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13963, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2186, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 281, "reproducing": 0, "rpc recv": 13479730908, "rpc sent": 1549711136, "signal": 13836, "smash jobs": 3, "triage jobs": 3, "vm output": 4055132, "vm restarts [base]": 8, "vm restarts [new]": 21 } 2025/09/02 10:37:44 base crash "KASAN: slab-use-after-free Write in kvm_gmem_release" is already known 2025/09/02 10:37:44 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 10:37:53 base crash: KASAN: slab-use-after-free Write in kvm_gmem_release 2025/09/02 10:37:55 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 10:38:04 base crash: KASAN: slab-use-after-free Write in kvm_gmem_release 2025/09/02 10:38:05 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 10:38:16 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 10:38:34 runner 4 connected 2025/09/02 10:38:43 runner 0 connected 2025/09/02 10:38:44 runner 1 connected 2025/09/02 10:38:53 runner 3 connected 2025/09/02 10:39:03 runner 9 connected 2025/09/02 10:39:05 runner 8 connected 2025/09/02 10:40:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 66, "corpus": 1901, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 532, "coverage": 14545, "distributor delayed": 922, "distributor undelayed": 922, "distributor violated": 0, "exec candidate": 2248, "exec collide": 162776, "exec fuzz": 309653, "exec gen": 16243, "exec hints": 14435, "exec inject": 0, "exec minimize": 28886, "exec retries": 0, "exec seeds": 5736, "exec smash": 47799, "exec total [base]": 238652, "exec total [new]": 599524, "exec triage": 5038, "executor restarts [base]": 51, "executor restarts [new]": 97, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 1, "max signal": 15147, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 14196, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2211, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 292, "reproducing": 0, "rpc recv": 14246346780, "rpc sent": 1635701224, "signal": 13869, "smash jobs": 2, "triage jobs": 3, "vm output": 4312210, "vm restarts [base]": 10, "vm restarts [new]": 25 } 2025/09/02 10:45:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 71, "corpus": 1927, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 624, "coverage": 14704, "distributor delayed": 936, "distributor undelayed": 936, "distributor violated": 0, "exec candidate": 2248, "exec collide": 172378, "exec fuzz": 328147, "exec gen": 17227, "exec hints": 14568, "exec inject": 0, "exec minimize": 29536, "exec retries": 0, "exec seeds": 5817, "exec smash": 48474, "exec total [base]": 250904, "exec total [new]": 630215, "exec triage": 5110, "executor restarts [base]": 51, "executor restarts [new]": 97, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15315, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 14512, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2241, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 286, "reproducing": 0, "rpc recv": 14903895208, "rpc sent": 1729290176, "signal": 14022, "smash jobs": 1, "triage jobs": 2, "vm output": 4542277, "vm restarts [base]": 10, "vm restarts [new]": 25 } 2025/09/02 10:48:05 runner 6 connected 2025/09/02 10:48:14 runner 7 connected 2025/09/02 10:50:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 74, "corpus": 1945, "corpus [files]": 16, "corpus [symbols]": 0, "cover overflows": 690, "coverage": 14772, "distributor delayed": 947, "distributor undelayed": 947, "distributor violated": 0, "exec candidate": 2248, "exec collide": 181853, "exec fuzz": 345953, "exec gen": 18196, "exec hints": 14652, "exec inject": 0, "exec minimize": 29892, "exec retries": 0, "exec seeds": 5871, "exec smash": 48925, "exec total [base]": 263066, "exec total [new]": 659470, "exec triage": 5168, "executor restarts [base]": 51, "executor restarts [new]": 103, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15391, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 14669, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2265, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 287, "reproducing": 0, "rpc recv": 15607162532, "rpc sent": 1820509216, "signal": 14090, "smash jobs": 0, "triage jobs": 4, "vm output": 4778113, "vm restarts [base]": 10, "vm restarts [new]": 27 } 2025/09/02 10:52:25 runner 2 connected 2025/09/02 10:55:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 81, "corpus": 1969, "corpus [files]": 17, "corpus [symbols]": 0, "cover overflows": 810, "coverage": 14847, "distributor delayed": 958, "distributor undelayed": 958, "distributor violated": 0, "exec candidate": 2248, "exec collide": 191609, "exec fuzz": 364727, "exec gen": 19182, "exec hints": 14772, "exec inject": 0, "exec minimize": 30372, "exec retries": 0, "exec seeds": 5946, "exec smash": 49537, "exec total [base]": 274675, "exec total [new]": 690328, "exec triage": 5223, "executor restarts [base]": 54, "executor restarts [new]": 103, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15458, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 14866, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2287, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 299, "reproducing": 0, "rpc recv": 16269254792, "rpc sent": 1912425680, "signal": 14159, "smash jobs": 2, "triage jobs": 0, "vm output": 5030689, "vm restarts [base]": 11, "vm restarts [new]": 27 } 2025/09/02 11:00:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 81, "corpus": 1987, "corpus [files]": 17, "corpus [symbols]": 0, "cover overflows": 894, "coverage": 14897, "distributor delayed": 963, "distributor undelayed": 963, "distributor violated": 0, "exec candidate": 2248, "exec collide": 201563, "exec fuzz": 383946, "exec gen": 20181, "exec hints": 14806, "exec inject": 0, "exec minimize": 30668, "exec retries": 0, "exec seeds": 6000, "exec smash": 50000, "exec total [base]": 287119, "exec total [new]": 721398, "exec triage": 5274, "executor restarts [base]": 54, "executor restarts [new]": 103, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15498, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 14992, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2308, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 292, "reproducing": 0, "rpc recv": 16926495400, "rpc sent": 2007627008, "signal": 14262, "smash jobs": 0, "triage jobs": 1, "vm output": 5240741, "vm restarts [base]": 11, "vm restarts [new]": 27 } 2025/09/02 11:05:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 84, "corpus": 1999, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 982, "coverage": 14920, "distributor delayed": 973, "distributor undelayed": 973, "distributor violated": 0, "exec candidate": 2248, "exec collide": 211676, "exec fuzz": 403125, "exec gen": 21197, "exec hints": 15081, "exec inject": 0, "exec minimize": 30956, "exec retries": 0, "exec seeds": 6036, "exec smash": 50290, "exec total [base]": 299583, "exec total [new]": 752645, "exec triage": 5326, "executor restarts [base]": 54, "executor restarts [new]": 103, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15534, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15113, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2326, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 289, "reproducing": 0, "rpc recv": 17570180336, "rpc sent": 2104028696, "signal": 14285, "smash jobs": 1, "triage jobs": 0, "vm output": 5471696, "vm restarts [base]": 11, "vm restarts [new]": 27 } 2025/09/02 11:10:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 85, "corpus": 2015, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1112, "coverage": 14947, "distributor delayed": 980, "distributor undelayed": 980, "distributor violated": 0, "exec candidate": 2248, "exec collide": 221530, "exec fuzz": 422006, "exec gen": 22165, "exec hints": 15135, "exec inject": 0, "exec minimize": 31384, "exec retries": 0, "exec seeds": 6084, "exec smash": 50682, "exec total [base]": 311797, "exec total [new]": 783329, "exec triage": 5385, "executor restarts [base]": 54, "executor restarts [new]": 103, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15574, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15323, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2348, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 291, "reproducing": 0, "rpc recv": 18226095556, "rpc sent": 2198289152, "signal": 14314, "smash jobs": 1, "triage jobs": 2, "vm output": 5671179, "vm restarts [base]": 11, "vm restarts [new]": 27 } 2025/09/02 11:13:08 runner 5 connected 2025/09/02 11:13:08 runner 1 connected 2025/09/02 11:13:08 runner 3 connected 2025/09/02 11:13:09 runner 2 connected 2025/09/02 11:13:15 runner 0 connected 2025/09/02 11:15:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 87, "corpus": 2025, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1182, "coverage": 14970, "distributor delayed": 985, "distributor undelayed": 985, "distributor violated": 0, "exec candidate": 2248, "exec collide": 230570, "exec fuzz": 439365, "exec gen": 23085, "exec hints": 15300, "exec inject": 0, "exec minimize": 31589, "exec retries": 0, "exec seeds": 6114, "exec smash": 50950, "exec total [base]": 323175, "exec total [new]": 811360, "exec triage": 5417, "executor restarts [base]": 57, "executor restarts [new]": 115, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15596, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15416, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2361, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 280, "reproducing": 0, "rpc recv": 18977684280, "rpc sent": 2284960696, "signal": 14335, "smash jobs": 0, "triage jobs": 0, "vm output": 5976331, "vm restarts [base]": 12, "vm restarts [new]": 31 } 2025/09/02 11:20:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 90, "corpus": 2032, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1313, "coverage": 14981, "distributor delayed": 992, "distributor undelayed": 992, "distributor violated": 0, "exec candidate": 2248, "exec collide": 240525, "exec fuzz": 458432, "exec gen": 24103, "exec hints": 15304, "exec inject": 0, "exec minimize": 31805, "exec retries": 0, "exec seeds": 6135, "exec smash": 51120, "exec total [base]": 335233, "exec total [new]": 841833, "exec triage": 5436, "executor restarts [base]": 57, "executor restarts [new]": 115, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15607, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15522, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2369, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 297, "reproducing": 0, "rpc recv": 19587978308, "rpc sent": 2378417632, "signal": 14345, "smash jobs": 1, "triage jobs": 1, "vm output": 6199502, "vm restarts [base]": 12, "vm restarts [new]": 31 } 2025/09/02 11:25:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 92, "corpus": 2044, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1421, "coverage": 15005, "distributor delayed": 995, "distributor undelayed": 995, "distributor violated": 0, "exec candidate": 2248, "exec collide": 250397, "exec fuzz": 477154, "exec gen": 25077, "exec hints": 15379, "exec inject": 0, "exec minimize": 32018, "exec retries": 0, "exec seeds": 6171, "exec smash": 51425, "exec total [base]": 347274, "exec total [new]": 872056, "exec triage": 5463, "executor restarts [base]": 57, "executor restarts [new]": 115, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15630, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15624, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2383, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 305, "reproducing": 0, "rpc recv": 20197824220, "rpc sent": 2471969040, "signal": 14366, "smash jobs": 0, "triage jobs": 2, "vm output": 6422236, "vm restarts [base]": 12, "vm restarts [new]": 31 } 2025/09/02 11:30:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 94, "corpus": 2053, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1514, "coverage": 15021, "distributor delayed": 999, "distributor undelayed": 999, "distributor violated": 0, "exec candidate": 2248, "exec collide": 260548, "exec fuzz": 496245, "exec gen": 25991, "exec hints": 15386, "exec inject": 0, "exec minimize": 32217, "exec retries": 0, "exec seeds": 6198, "exec smash": 51646, "exec total [base]": 359385, "exec total [new]": 902694, "exec triage": 5493, "executor restarts [base]": 57, "executor restarts [new]": 115, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15660, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15714, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2394, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 296, "reproducing": 0, "rpc recv": 20816621020, "rpc sent": 2565554464, "signal": 14378, "smash jobs": 1, "triage jobs": 1, "vm output": 6661649, "vm restarts [base]": 12, "vm restarts [new]": 31 } 2025/09/02 11:35:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 94, "corpus": 2063, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1604, "coverage": 15050, "distributor delayed": 1003, "distributor undelayed": 1003, "distributor violated": 0, "exec candidate": 2248, "exec collide": 270423, "exec fuzz": 514926, "exec gen": 26988, "exec hints": 15410, "exec inject": 0, "exec minimize": 32468, "exec retries": 0, "exec seeds": 6228, "exec smash": 51900, "exec total [base]": 371325, "exec total [new]": 932836, "exec triage": 5524, "executor restarts [base]": 57, "executor restarts [new]": 115, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15686, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15829, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2405, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 238, "reproducing": 0, "rpc recv": 21440421276, "rpc sent": 2658861248, "signal": 14402, "smash jobs": 0, "triage jobs": 0, "vm output": 6899395, "vm restarts [base]": 12, "vm restarts [new]": 31 } 2025/09/02 11:39:30 runner 4 connected 2025/09/02 11:39:39 runner 0 connected 2025/09/02 11:39:41 runner 1 connected 2025/09/02 11:39:49 runner 3 connected 2025/09/02 11:39:59 runner 9 connected 2025/09/02 11:40:03 runner 8 connected 2025/09/02 11:40:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 94, "corpus": 2066, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1689, "coverage": 15065, "distributor delayed": 1006, "distributor undelayed": 1006, "distributor violated": 0, "exec candidate": 2248, "exec collide": 279422, "exec fuzz": 532101, "exec gen": 27899, "exec hints": 15419, "exec inject": 0, "exec minimize": 32536, "exec retries": 0, "exec seeds": 6237, "exec smash": 51975, "exec total [base]": 381691, "exec total [new]": 960104, "exec triage": 5536, "executor restarts [base]": 63, "executor restarts [new]": 127, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15707, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15858, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2411, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 293, "reproducing": 0, "rpc recv": 22141279136, "rpc sent": 2743178568, "signal": 14414, "smash jobs": 0, "triage jobs": 2, "vm output": 7162690, "vm restarts [base]": 14, "vm restarts [new]": 35 } 2025/09/02 11:45:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 94, "corpus": 2069, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1739, "coverage": 15071, "distributor delayed": 1010, "distributor undelayed": 1010, "distributor violated": 0, "exec candidate": 2248, "exec collide": 288859, "exec fuzz": 550380, "exec gen": 28819, "exec hints": 15419, "exec inject": 0, "exec minimize": 32581, "exec retries": 0, "exec seeds": 6246, "exec smash": 52050, "exec total [base]": 393064, "exec total [new]": 988883, "exec triage": 5549, "executor restarts [base]": 63, "executor restarts [new]": 127, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15857, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15884, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2415, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 303, "reproducing": 0, "rpc recv": 22711332612, "rpc sent": 2831659680, "signal": 14420, "smash jobs": 0, "triage jobs": 0, "vm output": 7387532, "vm restarts [base]": 14, "vm restarts [new]": 35 } 2025/09/02 11:49:02 runner 6 connected 2025/09/02 11:49:10 runner 7 connected 2025/09/02 11:50:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 97, "corpus": 2077, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1773, "coverage": 15095, "distributor delayed": 1014, "distributor undelayed": 1014, "distributor violated": 0, "exec candidate": 2248, "exec collide": 297838, "exec fuzz": 567560, "exec gen": 29731, "exec hints": 15434, "exec inject": 0, "exec minimize": 32794, "exec retries": 0, "exec seeds": 6270, "exec smash": 52247, "exec total [base]": 404555, "exec total [new]": 1016440, "exec triage": 5577, "executor restarts [base]": 63, "executor restarts [new]": 133, "fault jobs": 0, "fuzzer jobs": 2, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15883, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 15985, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2427, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 293, "reproducing": 0, "rpc recv": 23372039656, "rpc sent": 2917952600, "signal": 14441, "smash jobs": 1, "triage jobs": 1, "vm output": 7625323, "vm restarts [base]": 14, "vm restarts [new]": 37 } 2025/09/02 11:53:22 runner 2 connected 2025/09/02 11:54:36 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 11:54:46 patched crashed: KASAN: slab-use-after-free Write in kvm_gmem_release [need repro = false] 2025/09/02 11:54:55 base crash: KASAN: slab-use-after-free Write in kvm_gmem_release 2025/09/02 11:55:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 97, "corpus": 2082, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1858, "coverage": 15102, "distributor delayed": 1016, "distributor undelayed": 1016, "distributor violated": 0, "exec candidate": 2248, "exec collide": 307528, "exec fuzz": 586022, "exec gen": 30694, "exec hints": 15449, "exec inject": 0, "exec minimize": 32887, "exec retries": 0, "exec seeds": 6285, "exec smash": 52375, "exec total [base]": 415520, "exec total [new]": 1045813, "exec triage": 5593, "executor restarts [base]": 66, "executor restarts [new]": 133, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 8, "hints jobs": 0, "max signal": 15891, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 16023, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2433, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 298, "reproducing": 0, "rpc recv": 23958383788, "rpc sent": 3007198832, "signal": 14448, "smash jobs": 0, "triage jobs": 0, "vm output": 7828439, "vm restarts [base]": 15, "vm restarts [new]": 37 } 2025/09/02 11:55:32 runner 3 connected 2025/09/02 11:55:43 runner 8 connected 2025/09/02 11:55:51 runner 1 connected 2025/09/02 12:00:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 97, "corpus": 2085, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 1966, "coverage": 15110, "distributor delayed": 1017, "distributor undelayed": 1017, "distributor violated": 0, "exec candidate": 2248, "exec collide": 317365, "exec fuzz": 604697, "exec gen": 31720, "exec hints": 15462, "exec inject": 0, "exec minimize": 32952, "exec retries": 0, "exec seeds": 6294, "exec smash": 52450, "exec total [base]": 426958, "exec total [new]": 1075532, "exec triage": 5604, "executor restarts [base]": 69, "executor restarts [new]": 139, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15901, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 16050, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2438, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 299, "reproducing": 0, "rpc recv": 24625573860, "rpc sent": 3099464072, "signal": 14456, "smash jobs": 0, "triage jobs": 1, "vm output": 8076028, "vm restarts [base]": 16, "vm restarts [new]": 39 } 2025/09/02 12:05:19 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 100, "corpus": 2096, "corpus [files]": 18, "corpus [symbols]": 0, "cover overflows": 2088, "coverage": 15122, "distributor delayed": 1024, "distributor undelayed": 1024, "distributor violated": 0, "exec candidate": 2248, "exec collide": 327057, "exec fuzz": 623817, "exec gen": 32746, "exec hints": 15475, "exec inject": 0, "exec minimize": 33203, "exec retries": 0, "exec seeds": 6327, "exec smash": 52725, "exec total [base]": 439050, "exec total [new]": 1105978, "exec triage": 5642, "executor restarts [base]": 69, "executor restarts [new]": 139, "fault jobs": 0, "fuzzer jobs": 1, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 15917, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 16171, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2453, "no exec duration": 22156000000, "no exec requests": 24, "pending": 0, "prog exec time": 295, "reproducing": 0, "rpc recv": 25263762192, "rpc sent": 3194185912, "signal": 14467, "smash jobs": 0, "triage jobs": 1, "vm output": 8296092, "vm restarts [base]": 16, "vm restarts [new]": 39 } 2025/09/02 12:10:15 bug reporting terminated 2025/09/02 12:10:15 status reporting terminated 2025/09/02 12:10:15 syz-diff (base): kernel context loop terminated 2025/09/02 12:10:15 syz-diff (new): kernel context loop terminated 2025/09/02 12:10:15 diff fuzzing terminated 2025/09/02 12:10:15 fuzzing is finished 2025/09/02 12:10:15 status at the end: Title On-Base On-Patched KASAN: slab-use-after-free Write in kvm_gmem_release 3 crashes 9 crashes lost connection to test machine 1 crashes