2025/12/20 00:37:41 extracted 324502 text symbol hashes for base and 324502 for patched 2025/12/20 00:37:41 symbol "__UNIQUE_ID_addressable_netfs_read_subreq_progress_1336" has different values in base vs patch 2025/12/20 00:37:41 binaries are different, continuing fuzzing 2025/12/20 00:37:41 adding modified_functions to focus areas: ["netfs_read_collection"] 2025/12/20 00:37:41 adding directly modified files to focus areas: ["fs/netfs/read_collect.c"] 2025/12/20 00:37:41 downloading corpus #1: "https://storage.googleapis.com/syzkaller/corpus/ci2-upstream-fs-corpus.db" 2025/12/20 00:38:39 runner 3 connected 2025/12/20 00:38:39 runner 5 connected 2025/12/20 00:38:39 runner 7 connected 2025/12/20 00:38:39 runner 8 connected 2025/12/20 00:38:40 runner 2 connected 2025/12/20 00:38:40 runner 2 connected 2025/12/20 00:38:40 runner 1 connected 2025/12/20 00:38:41 runner 0 connected 2025/12/20 00:38:41 runner 4 connected 2025/12/20 00:38:41 runner 6 connected 2025/12/20 00:38:41 runner 1 connected 2025/12/20 00:38:41 runner 0 connected 2025/12/20 00:38:46 initializing coverage information... 2025/12/20 00:38:46 executor cover filter: 0 PCs 2025/12/20 00:38:50 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$bcachefs : /proc/filesystems does not contain bcachefs syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 570/8056 2025/12/20 00:38:50 base: machine check complete 2025/12/20 00:38:51 discovered 7639 source files, 335900 symbols 2025/12/20 00:38:51 coverage filter: netfs_read_collection: [netfs_read_collection netfs_read_collection_worker] 2025/12/20 00:38:51 coverage filter: fs/netfs/read_collect.c: [fs/netfs/read_collect.c] 2025/12/20 00:38:51 area "symbols": 318 PCs in the cover filter 2025/12/20 00:38:51 area "files": 449 PCs in the cover filter 2025/12/20 00:38:51 area "": 0 PCs in the cover filter 2025/12/20 00:38:51 executor cover filter: 0 PCs 2025/12/20 00:38:52 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$bcachefs : /proc/filesystems does not contain bcachefs syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 570/8056 2025/12/20 00:38:52 new: machine check complete 2025/12/20 00:38:52 new: adding 13293 seeds 2025/12/20 00:39:19 crash "kernel BUG in hfs_write_inode" is already known 2025/12/20 00:39:19 base crash "kernel BUG in hfs_write_inode" is to be ignored 2025/12/20 00:39:19 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:39:45 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:40:23 runner 5 connected 2025/12/20 00:40:24 crash "kernel BUG in jfs_evict_inode" is already known 2025/12/20 00:40:24 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/12/20 00:40:24 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:40:26 crash "kernel BUG in jfs_evict_inode" is already known 2025/12/20 00:40:26 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2025/12/20 00:40:26 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:40:33 base crash: kernel BUG in jfs_evict_inode 2025/12/20 00:40:37 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:40:42 runner 1 connected 2025/12/20 00:40:47 base crash: kernel BUG in jfs_evict_inode 2025/12/20 00:41:22 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:41:22 runner 0 connected 2025/12/20 00:41:24 runner 6 connected 2025/12/20 00:41:31 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:41:31 runner 0 connected 2025/12/20 00:41:35 runner 7 connected 2025/12/20 00:41:44 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:41:44 runner 2 connected 2025/12/20 00:41:45 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:41:55 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:41:56 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:42:07 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:42:19 runner 1 connected 2025/12/20 00:42:19 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:42:25 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:42:29 runner 4 connected 2025/12/20 00:42:41 runner 5 connected 2025/12/20 00:42:41 runner 6 connected 2025/12/20 00:42:43 STAT { "buffer too small": 0, "candidate triage jobs": 156, "candidates": 11137, "comps overflows": 0, "corpus": 1931, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 506, "coverage": 71178, "distributor delayed": 2609, "distributor undelayed": 2462, "distributor violated": 1, "exec candidate": 2156, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 2864, "exec total [new]": 9252, "exec triage": 6249, "executor restarts [base]": 84, "executor restarts [new]": 172, "fault jobs": 0, "fuzzer jobs": 156, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 2, "hints jobs": 0, "max signal": 73745, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2156, "no exec duration": 34480000000, "no exec requests": 151, "pending": 0, "prog exec time": 383, "reproducing": 0, "rpc recv": 1127808124, "rpc sent": 202186928, "signal": 70433, "smash jobs": 0, "triage jobs": 0, "vm output": 4474159, "vm restarts [base]": 7, "vm restarts [new]": 16 } 2025/12/20 00:42:51 runner 0 connected 2025/12/20 00:42:54 runner 2 connected 2025/12/20 00:43:06 runner 7 connected 2025/12/20 00:43:22 runner 8 connected 2025/12/20 00:43:30 runner 3 connected 2025/12/20 00:44:06 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:44:10 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:44:11 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:44:13 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:44:24 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:44:28 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:44:34 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:45:03 runner 1 connected 2025/12/20 00:45:07 runner 7 connected 2025/12/20 00:45:09 runner 6 connected 2025/12/20 00:45:11 runner 5 connected 2025/12/20 00:45:22 runner 0 connected 2025/12/20 00:45:26 runner 2 connected 2025/12/20 00:45:32 runner 2 connected 2025/12/20 00:46:54 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/12/20 00:46:54 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/12/20 00:46:54 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/12/20 00:46:59 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:47:06 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/12/20 00:47:06 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/12/20 00:47:06 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/12/20 00:47:12 patched crashed: possible deadlock in ntfs_fiemap [need repro = true] 2025/12/20 00:47:12 scheduled a reproduction of 'possible deadlock in ntfs_fiemap' 2025/12/20 00:47:27 patched crashed: possible deadlock in ntfs_fiemap [need repro = true] 2025/12/20 00:47:27 scheduled a reproduction of 'possible deadlock in ntfs_fiemap' 2025/12/20 00:47:31 base crash: INFO: task hung in user_get_super 2025/12/20 00:47:37 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:47:39 patched crashed: possible deadlock in ntfs_fiemap [need repro = true] 2025/12/20 00:47:39 scheduled a reproduction of 'possible deadlock in ntfs_fiemap' 2025/12/20 00:47:43 STAT { "buffer too small": 0, "candidate triage jobs": 75, "candidates": 8487, "comps overflows": 0, "corpus": 4605, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 1080, "coverage": 87377, "distributor delayed": 6146, "distributor undelayed": 6082, "distributor violated": 151, "exec candidate": 4806, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 8086, "exec total [new]": 21769, "exec triage": 14500, "executor restarts [base]": 126, "executor restarts [new]": 293, "fault jobs": 0, "fuzzer jobs": 75, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 2, "hints jobs": 0, "max signal": 88472, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 4806, "no exec duration": 34480000000, "no exec requests": 151, "pending": 3, "prog exec time": 362, "reproducing": 0, "rpc recv": 2268716024, "rpc sent": 513532792, "signal": 86700, "smash jobs": 0, "triage jobs": 0, "vm output": 11765201, "vm restarts [base]": 8, "vm restarts [new]": 27 } 2025/12/20 00:47:48 crash "possible deadlock in attr_data_get_block" is already known 2025/12/20 00:47:48 base crash "possible deadlock in attr_data_get_block" is to be ignored 2025/12/20 00:47:48 patched crashed: possible deadlock in attr_data_get_block [need repro = false] 2025/12/20 00:47:51 runner 6 connected 2025/12/20 00:47:57 runner 8 connected 2025/12/20 00:47:59 crash "possible deadlock in attr_data_get_block" is already known 2025/12/20 00:47:59 base crash "possible deadlock in attr_data_get_block" is to be ignored 2025/12/20 00:47:59 patched crashed: possible deadlock in attr_data_get_block [need repro = false] 2025/12/20 00:48:02 runner 5 connected 2025/12/20 00:48:09 runner 0 connected 2025/12/20 00:48:10 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:48:20 runner 0 connected 2025/12/20 00:48:24 runner 7 connected 2025/12/20 00:48:29 runner 2 connected 2025/12/20 00:48:35 runner 1 connected 2025/12/20 00:48:46 runner 1 connected 2025/12/20 00:48:58 runner 3 connected 2025/12/20 00:49:08 runner 2 connected 2025/12/20 00:49:37 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:50:01 crash "UBSAN: array-index-out-of-bounds in dtInsertEntry" is already known 2025/12/20 00:50:01 base crash "UBSAN: array-index-out-of-bounds in dtInsertEntry" is to be ignored 2025/12/20 00:50:01 patched crashed: UBSAN: array-index-out-of-bounds in dtInsertEntry [need repro = false] 2025/12/20 00:50:12 crash "UBSAN: array-index-out-of-bounds in dtInsertEntry" is already known 2025/12/20 00:50:12 base crash "UBSAN: array-index-out-of-bounds in dtInsertEntry" is to be ignored 2025/12/20 00:50:12 patched crashed: UBSAN: array-index-out-of-bounds in dtInsertEntry [need repro = false] 2025/12/20 00:50:36 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:50:37 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:50:41 runner 7 connected 2025/12/20 00:50:46 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:50:48 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:50:50 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:50:51 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:50:58 runner 5 connected 2025/12/20 00:51:10 runner 1 connected 2025/12/20 00:51:33 runner 8 connected 2025/12/20 00:51:34 runner 0 connected 2025/12/20 00:51:43 runner 4 connected 2025/12/20 00:51:46 runner 6 connected 2025/12/20 00:51:48 runner 3 connected 2025/12/20 00:51:48 runner 2 connected 2025/12/20 00:52:28 patched crashed: KASAN: slab-use-after-free Read in jfs_syncpt [need repro = true] 2025/12/20 00:52:28 scheduled a reproduction of 'KASAN: slab-use-after-free Read in jfs_syncpt' 2025/12/20 00:52:43 STAT { "buffer too small": 0, "candidate triage jobs": 42, "candidates": 6383, "comps overflows": 0, "corpus": 6679, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 1573, "coverage": 96518, "distributor delayed": 9146, "distributor undelayed": 9146, "distributor violated": 151, "exec candidate": 6910, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 12947, "exec total [new]": 32338, "exec triage": 20850, "executor restarts [base]": 176, "executor restarts [new]": 428, "fault jobs": 0, "fuzzer jobs": 42, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 8, "hints jobs": 0, "max signal": 97381, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6909, "no exec duration": 34480000000, "no exec requests": 151, "pending": 4, "prog exec time": 266, "reproducing": 0, "rpc recv": 3471658744, "rpc sent": 805445272, "signal": 95648, "smash jobs": 0, "triage jobs": 0, "vm output": 17916909, "vm restarts [base]": 11, "vm restarts [new]": 44 } 2025/12/20 00:53:02 crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/12/20 00:53:02 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is to be ignored 2025/12/20 00:53:02 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/12/20 00:53:28 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:53:32 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/12/20 00:53:32 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/12/20 00:53:32 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/12/20 00:53:33 runner 5 connected 2025/12/20 00:53:39 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:53:40 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:53:41 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:53:41 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:53:44 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/12/20 00:53:44 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/12/20 00:53:44 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/12/20 00:54:00 runner 7 connected 2025/12/20 00:54:23 crash "WARNING in dbAdjTree" is already known 2025/12/20 00:54:23 base crash "WARNING in dbAdjTree" is to be ignored 2025/12/20 00:54:23 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/12/20 00:54:25 runner 1 connected 2025/12/20 00:54:26 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:54:30 runner 4 connected 2025/12/20 00:54:30 runner 3 connected 2025/12/20 00:54:37 runner 6 connected 2025/12/20 00:54:37 runner 0 connected 2025/12/20 00:54:37 runner 2 connected 2025/12/20 00:54:42 runner 8 connected 2025/12/20 00:55:16 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:55:21 runner 5 connected 2025/12/20 00:55:25 runner 0 connected 2025/12/20 00:55:28 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:56:11 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:56:11 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:56:12 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:56:13 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/12/20 00:56:13 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/12/20 00:56:13 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/12/20 00:56:13 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:56:14 runner 2 connected 2025/12/20 00:56:24 runner 1 connected 2025/12/20 00:56:25 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:56:40 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:56:40 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:56:51 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:56:58 crash "UBSAN: array-index-out-of-bounds in dtInsertEntry" is already known 2025/12/20 00:56:58 base crash "UBSAN: array-index-out-of-bounds in dtInsertEntry" is to be ignored 2025/12/20 00:56:58 patched crashed: UBSAN: array-index-out-of-bounds in dtInsertEntry [need repro = false] 2025/12/20 00:57:07 runner 0 connected 2025/12/20 00:57:09 runner 5 connected 2025/12/20 00:57:10 runner 2 connected 2025/12/20 00:57:11 runner 6 connected 2025/12/20 00:57:11 runner 4 connected 2025/12/20 00:57:23 runner 0 connected 2025/12/20 00:57:31 runner 3 connected 2025/12/20 00:57:35 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 00:57:36 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:57:37 runner 8 connected 2025/12/20 00:57:38 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:57:39 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:57:40 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:57:43 STAT { "buffer too small": 0, "candidate triage jobs": 6, "candidates": 5219, "comps overflows": 0, "corpus": 7833, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 1901, "coverage": 99470, "distributor delayed": 10615, "distributor undelayed": 10615, "distributor violated": 151, "exec candidate": 8074, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 17678, "exec total [new]": 41649, "exec triage": 24439, "executor restarts [base]": 215, "executor restarts [new]": 545, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 1, "hints jobs": 0, "max signal": 100384, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8072, "no exec duration": 34480000000, "no exec requests": 151, "pending": 4, "prog exec time": 262, "reproducing": 0, "rpc recv": 4545448988, "rpc sent": 1054331616, "signal": 98617, "smash jobs": 0, "triage jobs": 0, "vm output": 22668070, "vm restarts [base]": 15, "vm restarts [new]": 61 } 2025/12/20 00:57:47 runner 1 connected 2025/12/20 00:57:49 runner 7 connected 2025/12/20 00:57:50 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:58:10 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:58:31 runner 5 connected 2025/12/20 00:58:34 runner 0 connected 2025/12/20 00:58:34 runner 6 connected 2025/12/20 00:58:35 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/12/20 00:58:35 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/12/20 00:58:35 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/12/20 00:58:37 runner 2 connected 2025/12/20 00:58:37 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:58:38 runner 4 connected 2025/12/20 00:58:43 crash "WARNING in dbAdjTree" is already known 2025/12/20 00:58:43 base crash "WARNING in dbAdjTree" is to be ignored 2025/12/20 00:58:43 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/12/20 00:58:48 runner 2 connected 2025/12/20 00:59:08 runner 1 connected 2025/12/20 00:59:12 base crash: kernel BUG in hfs_write_inode 2025/12/20 00:59:31 base crash: UBSAN: array-index-out-of-bounds in dtInsertEntry 2025/12/20 00:59:33 runner 1 connected 2025/12/20 00:59:34 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 00:59:35 runner 8 connected 2025/12/20 00:59:41 runner 3 connected 2025/12/20 00:59:45 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:00:02 patched crashed: UBSAN: array-index-out-of-bounds in dtInsertEntry [need repro = false] 2025/12/20 01:00:05 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 01:00:09 runner 0 connected 2025/12/20 01:00:29 runner 1 connected 2025/12/20 01:00:31 runner 2 connected 2025/12/20 01:00:36 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:00:40 crash "WARNING in dbAdjTree" is already known 2025/12/20 01:00:40 base crash "WARNING in dbAdjTree" is to be ignored 2025/12/20 01:00:40 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/12/20 01:00:41 crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is already known 2025/12/20 01:00:41 base crash "KASAN: slab-out-of-bounds Read in dtSplitPage" is to be ignored 2025/12/20 01:00:41 patched crashed: KASAN: slab-out-of-bounds Read in dtSplitPage [need repro = false] 2025/12/20 01:00:41 runner 7 connected 2025/12/20 01:00:49 base crash: WARNING in dbAdjTree 2025/12/20 01:00:52 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/12/20 01:00:57 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:00:59 runner 5 connected 2025/12/20 01:01:03 runner 3 connected 2025/12/20 01:01:13 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:01:33 runner 8 connected 2025/12/20 01:01:37 runner 6 connected 2025/12/20 01:01:38 runner 1 connected 2025/12/20 01:01:46 runner 1 connected 2025/12/20 01:01:50 runner 0 connected 2025/12/20 01:01:55 runner 0 connected 2025/12/20 01:02:11 runner 2 connected 2025/12/20 01:02:11 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 01:02:13 triaged 92.2% of the corpus 2025/12/20 01:02:13 starting bug reproductions 2025/12/20 01:02:13 starting bug reproductions (max 6 VMs, 4 repros) 2025/12/20 01:02:13 start reproducing 'possible deadlock in ntfs_fiemap' 2025/12/20 01:02:13 start reproducing 'KASAN: slab-use-after-free Read in jfs_syncpt' 2025/12/20 01:02:30 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:02:41 base crash: WARNING in dbAdjTree 2025/12/20 01:02:43 STAT { "buffer too small": 0, "candidate triage jobs": 2, "candidates": 2, "comps overflows": 0, "corpus": 7901, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 2247, "coverage": 99629, "distributor delayed": 10782, "distributor undelayed": 10781, "distributor violated": 154, "exec candidate": 13291, "exec collide": 14, "exec fuzz": 28, "exec gen": 3, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 20760, "exec total [new]": 54263, "exec triage": 24745, "executor restarts [base]": 258, "executor restarts [new]": 694, "fault jobs": 0, "fuzzer jobs": 3, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 4, "hints jobs": 0, "max signal": 100568, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8156, "no exec duration": 34480000000, "no exec requests": 151, "pending": 2, "prog exec time": 715, "reproducing": 2, "rpc recv": 5470480808, "rpc sent": 1304287344, "signal": 98765, "smash jobs": 0, "triage jobs": 1, "vm output": 28561837, "vm restarts [base]": 22, "vm restarts [new]": 79 } 2025/12/20 01:02:43 triaged 100.0% of the corpus 2025/12/20 01:02:44 base crash: kernel BUG in jfs_evict_inode 2025/12/20 01:02:53 crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2025/12/20 01:02:53 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is to be ignored 2025/12/20 01:02:53 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:02:53 crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2025/12/20 01:02:53 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is to be ignored 2025/12/20 01:02:53 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:02:55 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 01:03:28 runner 4 connected 2025/12/20 01:03:39 runner 0 connected 2025/12/20 01:03:41 runner 1 connected 2025/12/20 01:03:50 runner 7 connected 2025/12/20 01:03:51 runner 8 connected 2025/12/20 01:03:52 runner 5 connected 2025/12/20 01:04:19 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/12/20 01:04:38 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:04:49 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:05:05 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/12/20 01:05:17 runner 7 connected 2025/12/20 01:05:44 runner 3 connected 2025/12/20 01:05:53 runner 5 connected 2025/12/20 01:06:04 runner 1 connected 2025/12/20 01:06:18 crash "possible deadlock in ocfs2_setattr" is already known 2025/12/20 01:06:18 base crash "possible deadlock in ocfs2_setattr" is to be ignored 2025/12/20 01:06:18 patched crashed: possible deadlock in ocfs2_setattr [need repro = false] 2025/12/20 01:06:41 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:06:42 base crash: WARNING in dbAdjTree 2025/12/20 01:06:45 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:07:06 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/12/20 01:07:16 runner 5 connected 2025/12/20 01:07:39 runner 3 connected 2025/12/20 01:07:39 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:07:40 runner 1 connected 2025/12/20 01:07:42 runner 2 connected 2025/12/20 01:07:43 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 14, "corpus": 7963, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 3799, "coverage": 100687, "distributor delayed": 11052, "distributor undelayed": 11052, "distributor violated": 154, "exec candidate": 13293, "exec collide": 352, "exec fuzz": 734, "exec gen": 37, "exec hints": 166, "exec inject": 0, "exec minimize": 869, "exec retries": 4, "exec seeds": 163, "exec smash": 376, "exec total [base]": 23655, "exec total [new]": 57300, "exec triage": 25128, "executor restarts [base]": 312, "executor restarts [new]": 832, "fault jobs": 0, "fuzzer jobs": 78, "fuzzing VMs [base]": 0, "fuzzing VMs [new]": 4, "hints jobs": 24, "max signal": 102394, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 918, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8311, "no exec duration": 34493000000, "no exec requests": 152, "pending": 2, "prog exec time": 496, "reproducing": 2, "rpc recv": 6020908584, "rpc sent": 1530426784, "signal": 99569, "smash jobs": 33, "triage jobs": 21, "vm output": 32355968, "vm restarts [base]": 27, "vm restarts [new]": 88 } 2025/12/20 01:08:03 runner 0 connected 2025/12/20 01:08:19 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:08:35 runner 6 connected 2025/12/20 01:08:41 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 01:08:47 patched crashed: INFO: task hung in lmLogClose [need repro = true] 2025/12/20 01:08:47 scheduled a reproduction of 'INFO: task hung in lmLogClose' 2025/12/20 01:08:47 start reproducing 'INFO: task hung in lmLogClose' 2025/12/20 01:09:17 runner 5 connected 2025/12/20 01:09:39 runner 8 connected 2025/12/20 01:09:45 runner 4 connected 2025/12/20 01:09:57 base crash: WARNING in dbAdjTree 2025/12/20 01:10:08 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/12/20 01:10:53 runner 0 connected 2025/12/20 01:11:05 runner 5 connected 2025/12/20 01:11:15 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:12:00 crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/12/20 01:12:00 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is to be ignored 2025/12/20 01:12:00 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/12/20 01:12:07 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:12:19 runner 7 connected 2025/12/20 01:12:43 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 40, "corpus": 8038, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 4766, "coverage": 100944, "distributor delayed": 11231, "distributor undelayed": 11228, "distributor violated": 154, "exec candidate": 13293, "exec collide": 612, "exec fuzz": 1266, "exec gen": 76, "exec hints": 302, "exec inject": 0, "exec minimize": 2009, "exec retries": 4, "exec seeds": 348, "exec smash": 885, "exec total [base]": 26283, "exec total [new]": 60376, "exec triage": 25392, "executor restarts [base]": 401, "executor restarts [new]": 982, "fault jobs": 0, "fuzzer jobs": 144, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 3, "hints jobs": 49, "max signal": 102769, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1898, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8427, "no exec duration": 34493000000, "no exec requests": 152, "pending": 2, "prog exec time": 562, "reproducing": 3, "rpc recv": 6619857320, "rpc sent": 1773094880, "signal": 99809, "smash jobs": 77, "triage jobs": 18, "vm output": 37440241, "vm restarts [base]": 29, "vm restarts [new]": 94 } 2025/12/20 01:12:58 runner 4 connected 2025/12/20 01:13:01 base crash: INFO: task hung in __iterate_supers 2025/12/20 01:13:05 runner 6 connected 2025/12/20 01:13:41 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:13:41 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:14:03 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:14:04 runner 2 connected 2025/12/20 01:14:46 runner 8 connected 2025/12/20 01:14:47 runner 1 connected 2025/12/20 01:15:00 runner 7 connected 2025/12/20 01:15:01 repro finished 'possible deadlock in ntfs_fiemap', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/12/20 01:15:01 failed repro for "possible deadlock in ntfs_fiemap", err=%!s() 2025/12/20 01:15:01 "possible deadlock in ntfs_fiemap": saved crash log into 1766193301.crash.log 2025/12/20 01:15:01 "possible deadlock in ntfs_fiemap": saved repro log into 1766193301.repro.log 2025/12/20 01:15:01 start reproducing 'possible deadlock in ntfs_fiemap' 2025/12/20 01:15:04 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:15:19 base crash: kernel BUG in jfs_evict_inode 2025/12/20 01:15:26 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/12/20 01:16:02 runner 5 connected 2025/12/20 01:16:14 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:16:15 runner 2 connected 2025/12/20 01:16:24 runner 0 connected 2025/12/20 01:16:38 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:16:38 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:17:11 runner 8 connected 2025/12/20 01:17:28 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/12/20 01:17:36 runner 5 connected 2025/12/20 01:17:42 runner 6 connected 2025/12/20 01:17:43 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 89, "corpus": 8106, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 6391, "coverage": 101152, "distributor delayed": 11409, "distributor undelayed": 11407, "distributor violated": 154, "exec candidate": 13293, "exec collide": 900, "exec fuzz": 1845, "exec gen": 105, "exec hints": 474, "exec inject": 0, "exec minimize": 3469, "exec retries": 4, "exec seeds": 513, "exec smash": 1441, "exec total [base]": 28202, "exec total [new]": 63892, "exec triage": 25657, "executor restarts [base]": 464, "executor restarts [new]": 1055, "fault jobs": 0, "fuzzer jobs": 225, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 3, "hints jobs": 85, "max signal": 103090, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 2964, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8539, "no exec duration": 34812000000, "no exec requests": 153, "pending": 1, "prog exec time": 636, "reproducing": 3, "rpc recv": 7176698624, "rpc sent": 2029493640, "signal": 100006, "smash jobs": 127, "triage jobs": 13, "vm output": 42422241, "vm restarts [base]": 33, "vm restarts [new]": 102 } 2025/12/20 01:18:21 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/12/20 01:18:33 runner 1 connected 2025/12/20 01:19:19 runner 4 connected 2025/12/20 01:19:42 base crash: WARNING in dbAdjTree 2025/12/20 01:19:46 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:19:53 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:20:16 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:20:18 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:20:40 runner 1 connected 2025/12/20 01:20:43 runner 5 connected 2025/12/20 01:20:50 runner 0 connected 2025/12/20 01:21:12 runner 8 connected 2025/12/20 01:21:15 runner 6 connected 2025/12/20 01:21:36 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:21:41 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:22:13 base crash: WARNING in dbAdjTree 2025/12/20 01:22:35 runner 7 connected 2025/12/20 01:22:39 runner 5 connected 2025/12/20 01:22:43 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 148, "corpus": 8183, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 8018, "coverage": 101426, "distributor delayed": 11571, "distributor undelayed": 11571, "distributor violated": 154, "exec candidate": 13293, "exec collide": 1232, "exec fuzz": 2461, "exec gen": 133, "exec hints": 656, "exec inject": 0, "exec minimize": 4957, "exec retries": 5, "exec seeds": 704, "exec smash": 2047, "exec total [base]": 30250, "exec total [new]": 67620, "exec triage": 25936, "executor restarts [base]": 529, "executor restarts [new]": 1144, "fault jobs": 0, "fuzzer jobs": 308, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 4, "hints jobs": 111, "max signal": 103433, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 4096, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8658, "no exec duration": 34987000000, "no exec requests": 154, "pending": 1, "prog exec time": 400, "reproducing": 3, "rpc recv": 7779465184, "rpc sent": 2324602720, "signal": 100271, "smash jobs": 187, "triage jobs": 10, "vm output": 48127412, "vm restarts [base]": 36, "vm restarts [new]": 108 } 2025/12/20 01:23:10 runner 1 connected 2025/12/20 01:23:26 crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/12/20 01:23:26 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is to be ignored 2025/12/20 01:23:26 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/12/20 01:23:28 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:23:43 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:23:47 crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/12/20 01:23:47 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is to be ignored 2025/12/20 01:23:47 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/12/20 01:24:12 crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/12/20 01:24:12 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is to be ignored 2025/12/20 01:24:12 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/12/20 01:24:15 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:24:23 runner 4 connected 2025/12/20 01:24:24 runner 0 connected 2025/12/20 01:24:41 runner 1 connected 2025/12/20 01:24:45 runner 6 connected 2025/12/20 01:25:08 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:25:10 runner 5 connected 2025/12/20 01:25:10 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/12/20 01:25:13 runner 8 connected 2025/12/20 01:25:26 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:25:44 base crash: possible deadlock in ocfs2_del_inode_from_orphan 2025/12/20 01:25:56 crash "possible deadlock in ocfs2_xattr_set" is already known 2025/12/20 01:25:56 base crash "possible deadlock in ocfs2_xattr_set" is to be ignored 2025/12/20 01:25:56 patched crashed: possible deadlock in ocfs2_xattr_set [need repro = false] 2025/12/20 01:26:06 runner 2 connected 2025/12/20 01:26:06 runner 0 connected 2025/12/20 01:26:24 runner 4 connected 2025/12/20 01:26:33 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:26:41 runner 1 connected 2025/12/20 01:26:55 runner 5 connected 2025/12/20 01:27:31 runner 7 connected 2025/12/20 01:27:35 repro finished 'possible deadlock in ntfs_fiemap', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/12/20 01:27:35 failed repro for "possible deadlock in ntfs_fiemap", err=%!s() 2025/12/20 01:27:35 "possible deadlock in ntfs_fiemap": saved crash log into 1766194055.crash.log 2025/12/20 01:27:35 "possible deadlock in ntfs_fiemap": saved repro log into 1766194055.repro.log 2025/12/20 01:27:35 start reproducing 'possible deadlock in ntfs_fiemap' 2025/12/20 01:27:37 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:27:43 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 203, "corpus": 8239, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 9401, "coverage": 101610, "distributor delayed": 11704, "distributor undelayed": 11703, "distributor violated": 154, "exec candidate": 13293, "exec collide": 1579, "exec fuzz": 3129, "exec gen": 171, "exec hints": 845, "exec inject": 0, "exec minimize": 5999, "exec retries": 5, "exec seeds": 904, "exec smash": 2704, "exec total [base]": 32064, "exec total [new]": 70992, "exec triage": 26156, "executor restarts [base]": 572, "executor restarts [new]": 1238, "fault jobs": 0, "fuzzer jobs": 351, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 4, "hints jobs": 119, "max signal": 103704, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 4956, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8756, "no exec duration": 34987000000, "no exec requests": 154, "pending": 0, "prog exec time": 759, "reproducing": 3, "rpc recv": 8476897384, "rpc sent": 2607443736, "signal": 100426, "smash jobs": 221, "triage jobs": 11, "vm output": 53735726, "vm restarts [base]": 42, "vm restarts [new]": 115 } 2025/12/20 01:27:58 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/12/20 01:28:43 runner 8 connected 2025/12/20 01:28:51 base crash: possible deadlock in ocfs2_evict_inode 2025/12/20 01:28:55 runner 0 connected 2025/12/20 01:29:26 base crash: possible deadlock in ocfs2_setattr 2025/12/20 01:29:30 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/12/20 01:29:43 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:29:47 runner 1 connected 2025/12/20 01:29:58 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:30:22 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/12/20 01:30:22 runner 0 connected 2025/12/20 01:30:27 runner 7 connected 2025/12/20 01:30:35 crash "possible deadlock in ocfs2_init_acl" is already known 2025/12/20 01:30:35 base crash "possible deadlock in ocfs2_init_acl" is to be ignored 2025/12/20 01:30:35 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/12/20 01:30:40 runner 6 connected 2025/12/20 01:30:54 runner 4 connected 2025/12/20 01:31:04 base crash: kernel BUG in hfs_write_inode 2025/12/20 01:31:10 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:31:20 runner 2 connected 2025/12/20 01:31:21 crash "possible deadlock in ocfs2_init_acl" is already known 2025/12/20 01:31:21 base crash "possible deadlock in ocfs2_init_acl" is to be ignored 2025/12/20 01:31:21 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/12/20 01:31:29 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/12/20 01:31:32 crash "possible deadlock in ocfs2_init_acl" is already known 2025/12/20 01:31:32 base crash "possible deadlock in ocfs2_init_acl" is to be ignored 2025/12/20 01:31:32 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/12/20 01:31:33 runner 8 connected 2025/12/20 01:32:02 runner 1 connected 2025/12/20 01:32:08 runner 5 connected 2025/12/20 01:32:17 runner 7 connected 2025/12/20 01:32:27 runner 4 connected 2025/12/20 01:32:30 runner 6 connected 2025/12/20 01:32:40 crash "possible deadlock in ocfs2_init_acl" is already known 2025/12/20 01:32:40 base crash "possible deadlock in ocfs2_init_acl" is to be ignored 2025/12/20 01:32:40 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/12/20 01:32:43 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 239, "corpus": 8261, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 10804, "coverage": 101657, "distributor delayed": 11812, "distributor undelayed": 11811, "distributor violated": 154, "exec candidate": 13293, "exec collide": 1852, "exec fuzz": 3633, "exec gen": 212, "exec hints": 1022, "exec inject": 0, "exec minimize": 6649, "exec retries": 6, "exec seeds": 1009, "exec smash": 3244, "exec total [base]": 33683, "exec total [new]": 73434, "exec triage": 26296, "executor restarts [base]": 634, "executor restarts [new]": 1348, "fault jobs": 0, "fuzzer jobs": 322, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 3, "hints jobs": 99, "max signal": 103829, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 5569, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8813, "no exec duration": 34992000000, "no exec requests": 155, "pending": 0, "prog exec time": 781, "reproducing": 3, "rpc recv": 9121018504, "rpc sent": 2839655608, "signal": 100469, "smash jobs": 211, "triage jobs": 12, "vm output": 57074846, "vm restarts [base]": 47, "vm restarts [new]": 124 } 2025/12/20 01:32:43 fuzzer has not reached the modified code in 30m0s, aborting 2025/12/20 01:32:43 new: rpc server terminaled 2025/12/20 01:32:43 base: rpc server terminaled 2025/12/20 01:32:43 base: pool terminated 2025/12/20 01:32:43 base: kernel context loop terminated 2025/12/20 01:33:02 repro finished 'INFO: task hung in lmLogClose', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/12/20 01:34:49 repro finished 'possible deadlock in ntfs_fiemap', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/12/20 01:37:10 repro finished 'KASAN: slab-use-after-free Read in jfs_syncpt', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/12/20 01:37:10 repro loop terminated 2025/12/20 01:37:10 new: pool terminated 2025/12/20 01:37:10 new: kernel context loop terminated 2025/12/20 01:37:10 diff fuzzing terminated 2025/12/20 01:37:10 bug reporting terminated 2025/12/20 01:37:10 status reporting terminated 2025/12/20 01:37:10 fuzzing is finished 2025/12/20 01:37:10 status at the end: Title On-Base On-Patched INFO: task hung in __iterate_supers 1 crashes INFO: task hung in lmLogClose 1 crashes INFO: task hung in user_get_super 1 crashes KASAN: slab-out-of-bounds Read in dtSplitPage 7 crashes KASAN: slab-use-after-free Read in jfs_syncpt 1 crashes UBSAN: array-index-out-of-bounds in dtInsertEntry 1 crashes 4 crashes WARNING in dbAdjTree 6 crashes 6 crashes kernel BUG in hfs_write_inode 21 crashes 49 crashes kernel BUG in jfs_evict_inode 4 crashes 16 crashes possible deadlock in attr_data_get_block 2 crashes possible deadlock in ntfs_fiemap 3 crashes possible deadlock in ocfs2_del_inode_from_orphan 1 crashes 5 crashes possible deadlock in ocfs2_evict_inode 1 crashes possible deadlock in ocfs2_init_acl 4 crashes possible deadlock in ocfs2_setattr 1 crashes 1 crashes possible deadlock in ocfs2_try_remove_refcount_tree 7 crashes 17 crashes possible deadlock in ocfs2_xattr_set 1 crashes