2026/07/08 23:01:39 extracted 324325 text symbol hashes for base and 324333 for patched 2026/07/08 23:01:39 symbol "init_iommu_from_acpi.__UNIQUE_ID_addressable___SCK__WARN_trap_1018" has different values in base vs patch 2026/07/08 23:01:39 binaries are different, continuing fuzzing 2026/07/08 23:01:39 adding modified_functions to focus areas: ["__avic_vcpu_load" "__avic_vcpu_put" "__domain_flush_pages" "__pfx_avic_add_vcpu_to_gappi_wakeup_list" "__pfx_avic_destroy_vcpu" "__pfx_avic_gappi_wakeup_handler" "__pfx_avic_remove_vcpu_from_gappi_wakeup_list" "alloc_irq_table" "amd_iommu_activate_guest_mode" "amd_iommu_attach_device" "amd_iommu_change_top" "amd_iommu_complete_ppr" "amd_iommu_deactivate_guest_mode" "amd_iommu_dev_flush_pasid_pages" "amd_iommu_device_group" "amd_iommu_disable" "amd_iommu_domain_alloc_paging_flags" "amd_iommu_enable_interrupts" "amd_iommu_flush_all_caches" "amd_iommu_get_resv_regions" "amd_iommu_int_thread_evtlog" "amd_iommu_probe_device" "amd_iommu_resume" "amd_iommu_set_dirty_tracking" "amd_iommu_suspend" "amd_iommu_update_dte" "amd_iommu_update_ga" "amd_ir_set_vcpu_affinity" "avic_add_vcpu_to_gappi_wakeup_list" "avic_destroy_vcpu" "avic_gappi_wakeup_handler" "avic_handle_ldr_update" "avic_hardware_setup" "avic_hardware_unsetup" "avic_incomplete_ipi_interception" "avic_init_vcpu" "avic_pi_update_irte" "avic_refresh_apicv_exec_ctrl" "avic_refresh_virtual_apic_mode" "avic_remove_vcpu_from_gappi_wakeup_list" "avic_unaccelerated_access_interception" "avic_update_iommu_vcpu_affinity" "avic_vcpu_blocking" "avic_vcpu_unblocking" "clone_alias" "detach_device" "device_flush_dte" "device_flush_iotlb" "disable_iommus" "early_enable_iommu" "iommu_completion_wait" "iommu_disable" "iommu_go_to_state" "irte_activate" "irte_deactivate" "irte_ga_activate" "irte_ga_deactivate" "irte_ga_set_affinity" "irte_set_affinity" "parse_amd_iommu_options" "set_dte_entry" "svm_init" "svm_vcpu_free" "update_dte256"] 2026/07/08 23:01:39 adding directly modified files to focus areas: ["arch/x86/include/asm/irq_remapping.h" "arch/x86/kvm/svm/avic.c" "arch/x86/kvm/svm/svm.c" "arch/x86/kvm/svm/svm.h" "drivers/iommu/amd/amd_iommu.h" "drivers/iommu/amd/amd_iommu_types.h" "drivers/iommu/amd/init.c" "drivers/iommu/amd/iommu.c" "include/linux/amd-iommu.h"] 2026/07/08 23:01:39 downloading corpus #1: "https://storage.googleapis.com/syzkaller/corpus/ci-upstream-kasan-gce-root-corpus.db" 2026/07/08 23:01:41 serving rpc on tcp://45361 2026/07/08 23:01:41 serving rpc on tcp://39887 2026/07/08 23:02:17 broken programs in the corpus: 94, broken seeds: 0 2026/07/08 23:02:38 runner 1 connected 2026/07/08 23:02:38 runner 0 connected 2026/07/08 23:02:38 runner 1 connected 2026/07/08 23:02:45 initializing coverage information... 2026/07/08 23:02:45 runner 7 connected 2026/07/08 23:02:45 executor cover filter: 0 PCs 2026/07/08 23:02:46 runner 2 connected 2026/07/08 23:02:46 runner 5 connected 2026/07/08 23:02:46 runner 6 connected 2026/07/08 23:02:46 runner 3 connected 2026/07/08 23:02:46 runner 2 connected 2026/07/08 23:02:46 runner 0 connected 2026/07/08 23:02:47 runner 8 connected 2026/07/08 23:02:47 runner 4 connected 2026/07/08 23:02:48 machine check: disabled the following syscalls: openat$sev : failed to open /dev/sev: no such file or directory syz_kvm_setup_cpu$ppc64 : unsupported arch transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] ioctl$KVM_CAP_SGX_ATTRIBUTE : fd_sgx_provision [openat$sgx_provision] ioctl$KVM_SEV_CERT_EXPORT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_DECRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_ENCRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_ES_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_GET_ATTESTATION_REPORT : fd_sev [openat$sev] ioctl$KVM_SEV_GUEST_STATUS : fd_sev [openat$sev] ioctl$KVM_SEV_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_INIT2 : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_MEASURE : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_SECRET : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_LAUNCH_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_RECEIVE_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_CANCEL : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_START : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_START : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_UPDATE : fd_sev [openat$sev] munmap$IORING_OFF_CQ_RING : ring_ptr [mmap$IORING_OFF_CQ_RING mmap$IORING_OFF_PBUF_RING mmap$IORING_OFF_SQ_RING ...] munmap$IORING_OFF_SQES : sqes_ptr [mmap$IORING_OFF_SQES syz_io_uring_setup syz_ublk_setup_io_uring syz_ublk_setup_queues] munmap$IORING_OFF_SQ_RING : ring_ptr [mmap$IORING_OFF_CQ_RING mmap$IORING_OFF_PBUF_RING mmap$IORING_OFF_SQ_RING ...] munmap$bifrost : user_addr [mmap$bifrost] munmap$binder : binder_ptr [mmap$binder] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") MemoryDump : disabled by user NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 173/8252 2026/07/08 23:02:48 base: machine check complete 2026/07/08 23:02:50 discovered 7613 source files, 335148 symbols 2026/07/08 23:02:51 coverage filter: ^__avic_vcpu_load$: [__avic_vcpu_load] 2026/07/08 23:02:51 coverage filter: ^__avic_vcpu_put$: [__avic_vcpu_put] 2026/07/08 23:02:51 coverage filter: ^__domain_flush_pages$: [__domain_flush_pages] 2026/07/08 23:02:51 coverage filter: ^__pfx_avic_add_vcpu_to_gappi_wakeup_list$: [] 2026/07/08 23:02:51 coverage filter: ^__pfx_avic_destroy_vcpu$: [] 2026/07/08 23:02:51 coverage filter: ^__pfx_avic_gappi_wakeup_handler$: [] 2026/07/08 23:02:51 coverage filter: ^__pfx_avic_remove_vcpu_from_gappi_wakeup_list$: [] 2026/07/08 23:02:51 coverage filter: ^alloc_irq_table$: [alloc_irq_table] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_activate_guest_mode$: [amd_iommu_activate_guest_mode] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_attach_device$: [amd_iommu_attach_device] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_change_top$: [amd_iommu_change_top] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_complete_ppr$: [amd_iommu_complete_ppr] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_deactivate_guest_mode$: [amd_iommu_deactivate_guest_mode] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_dev_flush_pasid_pages$: [amd_iommu_dev_flush_pasid_pages] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_device_group$: [amd_iommu_device_group] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_disable$: [amd_iommu_disable] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_domain_alloc_paging_flags$: [amd_iommu_domain_alloc_paging_flags] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_enable_interrupts$: [amd_iommu_enable_interrupts] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_flush_all_caches$: [amd_iommu_flush_all_caches] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_get_resv_regions$: [amd_iommu_get_resv_regions] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_int_thread_evtlog$: [amd_iommu_int_thread_evtlog] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_probe_device$: [amd_iommu_probe_device] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_resume$: [amd_iommu_resume] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_set_dirty_tracking$: [amd_iommu_set_dirty_tracking] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_suspend$: [amd_iommu_suspend] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_update_dte$: [amd_iommu_update_dte] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_update_ga$: [amd_iommu_update_ga] 2026/07/08 23:02:51 coverage filter: ^amd_ir_set_vcpu_affinity$: [amd_ir_set_vcpu_affinity] 2026/07/08 23:02:51 coverage filter: ^avic_add_vcpu_to_gappi_wakeup_list$: [avic_add_vcpu_to_gappi_wakeup_list] 2026/07/08 23:02:51 coverage filter: ^avic_destroy_vcpu$: [avic_destroy_vcpu] 2026/07/08 23:02:51 coverage filter: ^avic_gappi_wakeup_handler$: [avic_gappi_wakeup_handler] 2026/07/08 23:02:51 coverage filter: ^avic_handle_ldr_update$: [avic_handle_ldr_update] 2026/07/08 23:02:51 coverage filter: ^avic_hardware_setup$: [] 2026/07/08 23:02:51 coverage filter: ^avic_hardware_unsetup$: [avic_hardware_unsetup] 2026/07/08 23:02:51 coverage filter: ^avic_incomplete_ipi_interception$: [avic_incomplete_ipi_interception] 2026/07/08 23:02:51 coverage filter: ^avic_init_vcpu$: [avic_init_vcpu] 2026/07/08 23:02:51 coverage filter: ^avic_pi_update_irte$: [avic_pi_update_irte] 2026/07/08 23:02:51 coverage filter: ^avic_refresh_apicv_exec_ctrl$: [avic_refresh_apicv_exec_ctrl] 2026/07/08 23:02:51 coverage filter: ^avic_refresh_virtual_apic_mode$: [avic_refresh_virtual_apic_mode] 2026/07/08 23:02:51 coverage filter: ^avic_remove_vcpu_from_gappi_wakeup_list$: [avic_remove_vcpu_from_gappi_wakeup_list] 2026/07/08 23:02:51 coverage filter: ^avic_unaccelerated_access_interception$: [avic_unaccelerated_access_interception] 2026/07/08 23:02:51 coverage filter: ^avic_update_iommu_vcpu_affinity$: [avic_update_iommu_vcpu_affinity] 2026/07/08 23:02:51 coverage filter: ^avic_vcpu_blocking$: [avic_vcpu_blocking] 2026/07/08 23:02:51 coverage filter: ^avic_vcpu_unblocking$: [avic_vcpu_unblocking] 2026/07/08 23:02:51 coverage filter: ^clone_alias$: [clone_alias] 2026/07/08 23:02:51 coverage filter: ^detach_device$: [detach_device] 2026/07/08 23:02:51 coverage filter: ^device_flush_dte$: [device_flush_dte] 2026/07/08 23:02:51 coverage filter: ^device_flush_iotlb$: [device_flush_iotlb] 2026/07/08 23:02:51 coverage filter: ^disable_iommus$: [disable_iommus] 2026/07/08 23:02:51 coverage filter: ^early_enable_iommu$: [early_enable_iommu] 2026/07/08 23:02:51 coverage filter: ^iommu_completion_wait$: [iommu_completion_wait] 2026/07/08 23:02:51 coverage filter: ^iommu_disable$: [iommu_disable] 2026/07/08 23:02:51 coverage filter: ^iommu_go_to_state$: [] 2026/07/08 23:02:51 coverage filter: ^irte_activate$: [irte_activate] 2026/07/08 23:02:51 coverage filter: ^irte_deactivate$: [irte_deactivate] 2026/07/08 23:02:51 coverage filter: ^irte_ga_activate$: [irte_ga_activate] 2026/07/08 23:02:51 coverage filter: ^irte_ga_deactivate$: [irte_ga_deactivate] 2026/07/08 23:02:51 coverage filter: ^irte_ga_set_affinity$: [irte_ga_set_affinity] 2026/07/08 23:02:51 coverage filter: ^irte_set_affinity$: [irte_set_affinity] 2026/07/08 23:02:51 coverage filter: ^parse_amd_iommu_options$: [] 2026/07/08 23:02:51 coverage filter: ^set_dte_entry$: [set_dte_entry] 2026/07/08 23:02:51 coverage filter: ^svm_init$: [] 2026/07/08 23:02:51 coverage filter: ^svm_vcpu_free$: [svm_vcpu_free] 2026/07/08 23:02:51 coverage filter: ^update_dte256$: [update_dte256] 2026/07/08 23:02:51 coverage filter: arch/x86/include/asm/irq_remapping.h: [] 2026/07/08 23:02:51 coverage filter: arch/x86/kvm/svm/avic.c: [arch/x86/kvm/svm/avic.c] 2026/07/08 23:02:51 coverage filter: arch/x86/kvm/svm/svm.c: [arch/x86/kvm/svm/svm.c] 2026/07/08 23:02:51 coverage filter: arch/x86/kvm/svm/svm.h: [] 2026/07/08 23:02:51 coverage filter: drivers/iommu/amd/amd_iommu.h: [] 2026/07/08 23:02:51 coverage filter: drivers/iommu/amd/amd_iommu_types.h: [] 2026/07/08 23:02:51 coverage filter: drivers/iommu/amd/init.c: [drivers/iommu/amd/init.c] 2026/07/08 23:02:51 coverage filter: drivers/iommu/amd/iommu.c: [drivers/iommu/amd/iommu.c] 2026/07/08 23:02:51 coverage filter: include/linux/amd-iommu.h: [] 2026/07/08 23:02:51 coverage filter: ^avic_update_iommu_vcpu_affinity$: [avic_update_iommu_vcpu_affinity] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_update_ga$: [amd_iommu_update_ga] 2026/07/08 23:02:51 coverage filter: ^amd_iommu_activate_guest_mode$: [amd_iommu_activate_guest_mode] 2026/07/08 23:02:51 coverage filter: ^avic_pi_update_irte$: [avic_pi_update_irte] 2026/07/08 23:02:51 coverage filter: ^__amd_iommu_update_ga$: [] 2026/07/08 23:02:51 coverage filter: ^avic_add_vcpu_to_gappi_wakeup_list$: [avic_add_vcpu_to_gappi_wakeup_list] 2026/07/08 23:02:51 coverage filter: ^avic_remove_vcpu_from_gappi_wakeup_list$: [avic_remove_vcpu_from_gappi_wakeup_list] 2026/07/08 23:02:51 coverage filter: ^avic_gappi_wakeup_handler$: [avic_gappi_wakeup_handler] 2026/07/08 23:02:51 coverage filter: ^avic_destroy_vcpu$: [avic_destroy_vcpu] 2026/07/08 23:02:51 coverage filter: ^svm_ir_list_del$: [] 2026/07/08 23:02:51 area "symbols": 1170 PCs in the cover filter 2026/07/08 23:02:51 area "files": 4498 PCs in the cover filter 2026/07/08 23:02:51 area "": 0 PCs in the cover filter 2026/07/08 23:02:51 area "ai_focus": 127 PCs in the cover filter 2026/07/08 23:02:51 executor cover filter: 0 PCs 2026/07/08 23:02:53 machine check: disabled the following syscalls: openat$sev : failed to open /dev/sev: no such file or directory syz_kvm_setup_cpu$ppc64 : unsupported arch transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] ioctl$KVM_CAP_SGX_ATTRIBUTE : fd_sgx_provision [openat$sgx_provision] ioctl$KVM_SEV_CERT_EXPORT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_DECRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_ENCRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_ES_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_GET_ATTESTATION_REPORT : fd_sev [openat$sev] ioctl$KVM_SEV_GUEST_STATUS : fd_sev [openat$sev] ioctl$KVM_SEV_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_INIT2 : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_MEASURE : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_SECRET : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_LAUNCH_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_RECEIVE_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_CANCEL : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_START : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_START : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_UPDATE : fd_sev [openat$sev] munmap$IORING_OFF_CQ_RING : ring_ptr [mmap$IORING_OFF_CQ_RING mmap$IORING_OFF_PBUF_RING mmap$IORING_OFF_SQ_RING ...] munmap$IORING_OFF_SQES : sqes_ptr [mmap$IORING_OFF_SQES syz_io_uring_setup syz_ublk_setup_io_uring syz_ublk_setup_queues] munmap$IORING_OFF_SQ_RING : ring_ptr [mmap$IORING_OFF_CQ_RING mmap$IORING_OFF_PBUF_RING mmap$IORING_OFF_SQ_RING ...] munmap$bifrost : user_addr [mmap$bifrost] munmap$binder : binder_ptr [mmap$binder] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") MemoryDump : disabled by user NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 173/8252 2026/07/08 23:02:53 new: machine check complete 2026/07/08 23:02:57 new: adding 2736 seeds 2026/07/08 23:03:11 triaged 96.7% of the corpus 2026/07/08 23:03:11 starting bug reproductions 2026/07/08 23:03:11 starting bug reproductions (max 6 VMs, 4 repros) 2026/07/08 23:03:41 triaged 100.0% of the corpus 2026/07/08 23:06:41 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 7, "corpus": 757, "corpus [ai_focus]": 0, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 0, "coverage": 10457, "distributor delayed": 466, "distributor undelayed": 466, "distributor violated": 0, "exec candidate": 2736, "exec collide": 4364, "exec fuzz": 8096, "exec gen": 442, "exec hints": 1235, "exec inject": 0, "exec minimize": 10050, "exec retries": 0, "exec seeds": 2138, "exec smash": 9290, "exec total [base]": 17556, "exec total [new]": 48568, "exec triage": 2063, "executor restarts [base]": 27, "executor restarts [new]": 50, "fault jobs": 0, "fuzzer jobs": 872, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 180, "max signal": 10929, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 5458, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 871, "no exec duration": 9000000000, "no exec requests": 9, "pending": 0, "prog exec time": 189, "reproducing": 0, "rpc recv": 1301294996, "rpc sent": 58506528, "signal": 9964, "smash jobs": 682, "triage jobs": 10, "vm output": 185601, "vm restarts [base]": 3, "vm restarts [new]": 9 } 2026/07/08 23:11:41 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 50, "corpus": 1069, "corpus [ai_focus]": 0, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 62, "coverage": 12461, "distributor delayed": 639, "distributor undelayed": 639, "distributor violated": 0, "exec candidate": 2736, "exec collide": 9685, "exec fuzz": 18285, "exec gen": 960, "exec hints": 3740, "exec inject": 0, "exec minimize": 15250, "exec retries": 0, "exec seeds": 3164, "exec smash": 21791, "exec total [base]": 30440, "exec total [new]": 86660, "exec triage": 2893, "executor restarts [base]": 27, "executor restarts [new]": 50, "fault jobs": 0, "fuzzer jobs": 597, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 139, "max signal": 12998, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 7901, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1244, "no exec duration": 9000000000, "no exec requests": 9, "pending": 0, "prog exec time": 274, "reproducing": 0, "rpc recv": 2397215576, "rpc sent": 132303408, "signal": 11943, "smash jobs": 444, "triage jobs": 14, "vm output": 291408, "vm restarts [base]": 3, "vm restarts [new]": 9 } 2026/07/08 23:16:41 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 119, "corpus": 1253, "corpus [ai_focus]": 0, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 123, "coverage": 12992, "distributor delayed": 740, "distributor undelayed": 740, "distributor violated": 0, "exec candidate": 2736, "exec collide": 14646, "exec fuzz": 27747, "exec gen": 1434, "exec hints": 6448, "exec inject": 0, "exec minimize": 18160, "exec retries": 0, "exec seeds": 3779, "exec smash": 31364, "exec total [base]": 40660, "exec total [new]": 117811, "exec triage": 3343, "executor restarts [base]": 27, "executor restarts [new]": 50, "fault jobs": 0, "fuzzer jobs": 20, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 5, "max signal": 13488, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 9232, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1444, "no exec duration": 9000000000, "no exec requests": 9, "pending": 0, "prog exec time": 260, "reproducing": 0, "rpc recv": 3293740908, "rpc sent": 197209248, "signal": 12399, "smash jobs": 11, "triage jobs": 4, "vm output": 450739, "vm restarts [base]": 3, "vm restarts [new]": 9 } 2026/07/08 23:21:41 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 134, "corpus": 1357, "corpus [ai_focus]": 0, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 164, "coverage": 13364, "distributor delayed": 785, "distributor undelayed": 785, "distributor violated": 0, "exec candidate": 2736, "exec collide": 22587, "exec fuzz": 43157, "exec gen": 2245, "exec hints": 7187, "exec inject": 0, "exec minimize": 19816, "exec retries": 0, "exec seeds": 4086, "exec smash": 33996, "exec total [base]": 50634, "exec total [new]": 147590, "exec triage": 3627, "executor restarts [base]": 27, "executor restarts [new]": 50, "fault jobs": 0, "fuzzer jobs": 14, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 3, "max signal": 13864, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10023, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1570, "no exec duration": 9000000000, "no exec requests": 9, "pending": 0, "prog exec time": 273, "reproducing": 0, "rpc recv": 4004209256, "rpc sent": 270991416, "signal": 12746, "smash jobs": 5, "triage jobs": 6, "vm output": 587260, "vm restarts [base]": 3, "vm restarts [new]": 9 } 2026/07/08 23:26:41 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 152, "corpus": 1469, "corpus [ai_focus]": 0, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 214, "coverage": 13853, "distributor delayed": 832, "distributor undelayed": 832, "distributor violated": 0, "exec candidate": 2736, "exec collide": 30582, "exec fuzz": 58293, "exec gen": 3063, "exec hints": 8118, "exec inject": 0, "exec minimize": 21751, "exec retries": 0, "exec seeds": 4434, "exec smash": 36835, "exec total [base]": 60575, "exec total [new]": 177843, "exec triage": 3875, "executor restarts [base]": 27, "executor restarts [new]": 50, "fault jobs": 0, "fuzzer jobs": 16, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 3, "max signal": 14414, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10920, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1688, "no exec duration": 9000000000, "no exec requests": 9, "pending": 0, "prog exec time": 259, "reproducing": 0, "rpc recv": 4751128328, "rpc sent": 344253024, "signal": 13175, "smash jobs": 8, "triage jobs": 5, "vm output": 742891, "vm restarts [base]": 3, "vm restarts [new]": 9 } 2026/07/08 23:31:41 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 154, "corpus": 1575, "corpus [ai_focus]": 0, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 244, "coverage": 14399, "distributor delayed": 881, "distributor undelayed": 881, "distributor violated": 0, "exec candidate": 2736, "exec collide": 38741, "exec fuzz": 73671, "exec gen": 3824, "exec hints": 8522, "exec inject": 0, "exec minimize": 23404, "exec retries": 0, "exec seeds": 4750, "exec smash": 39545, "exec total [base]": 70307, "exec total [new]": 207480, "exec triage": 4132, "executor restarts [base]": 27, "executor restarts [new]": 50, "fault jobs": 0, "fuzzer jobs": 9, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 1, "max signal": 14907, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 11711, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1806, "no exec duration": 9000000000, "no exec requests": 9, "pending": 0, "prog exec time": 274, "reproducing": 0, "rpc recv": 5444901980, "rpc sent": 418172024, "signal": 13688, "smash jobs": 7, "triage jobs": 1, "vm output": 1051986, "vm restarts [base]": 3, "vm restarts [new]": 9 } 2026/07/08 23:33:41 fuzzer has not reached the modified code in 30m0s, aborting 2026/07/08 23:33:41 repro loop terminated 2026/07/08 23:33:41 VM 2: running for 30m55.811471569s, restarting 2026/07/08 23:33:41 VM 5: running for 30m55.750978842s, restarting 2026/07/08 23:33:41 VM 0: running for 30m55.271866171s, restarting 2026/07/08 23:33:41 VM 4: running for 30m54.847184018s, restarting 2026/07/08 23:33:41 VM 1: running for 31m3.441235676s, restarting 2026/07/08 23:33:41 base: rpc server terminaled 2026/07/08 23:33:41 VM 7: running for 30m56.89957979s, restarting 2026/07/08 23:33:41 VM 8: running for 30m54.991047736s, restarting 2026/07/08 23:33:41 VM 2: running for 30m55.480545489s, restarting 2026/07/08 23:33:41 VM 1: running for 31m3.849616576s, restarting 2026/07/08 23:33:41 VM 6: running for 30m55.615368842s, restarting 2026/07/08 23:33:41 new: rpc server terminaled 2026/07/08 23:33:41 VM 3: running for 30m55.536951197s, restarting 2026/07/08 23:33:41 VM 0: running for 31m3.629857424s, restarting 2026/07/08 23:33:41 base: pool terminated 2026/07/08 23:33:41 base: kernel context loop terminated 2026/07/08 23:33:41 new: pool terminated 2026/07/08 23:33:41 new: kernel context loop terminated 2026/07/08 23:33:41 diff fuzzing terminated 2026/07/08 23:33:41 bug reporting terminated 2026/07/08 23:33:41 status reporting terminated 2026/07/08 23:33:41 fuzzing is finished 2026/07/08 23:33:41 status at the end: Title On-Base On-Patched Status