2026/04/23 22:45:26 extracted 313144 text symbol hashes for base and 313144 for patched 2026/04/23 22:45:26 symbol "__UNIQUE_ID_addressable_iomap_zero_range_1214" has different values in base vs patch 2026/04/23 22:45:26 binaries are different, continuing fuzzing 2026/04/23 22:45:26 adding modified_functions to focus areas: ["__iomap_dio_rw" "__iomap_write_begin" "iomap_file_buffered_write" "iomap_file_unshare" "iomap_write_begin" "iomap_write_end"] 2026/04/23 22:45:26 adding directly modified files to focus areas: ["fs/iomap/buffered-io.c" "fs/iomap/direct-io.c" "fs/ntfs/iomap.c" "include/linux/iomap.h"] 2026/04/23 22:45:26 downloading corpus #1: "https://storage.googleapis.com/syzkaller/corpus/ci2-upstream-fs-corpus.db" 2026/04/23 22:46:26 runner 7 connected 2026/04/23 22:46:27 runner 8 connected 2026/04/23 22:46:34 runner 4 connected 2026/04/23 22:46:34 runner 2 connected 2026/04/23 22:46:34 runner 5 connected 2026/04/23 22:46:34 runner 1 connected 2026/04/23 22:46:34 runner 2 connected 2026/04/23 22:46:34 runner 6 connected 2026/04/23 22:46:34 runner 0 connected 2026/04/23 22:46:34 runner 0 connected 2026/04/23 22:46:35 runner 3 connected 2026/04/23 22:46:35 initializing coverage information... 2026/04/23 22:46:35 runner 1 connected 2026/04/23 22:46:41 discovered 7355 source files, 323331 symbols 2026/04/23 22:46:41 coverage filter: ^__iomap_dio_rw$: [__iomap_dio_rw] 2026/04/23 22:46:41 coverage filter: ^__iomap_write_begin$: [__iomap_write_begin] 2026/04/23 22:46:41 coverage filter: ^iomap_file_buffered_write$: [iomap_file_buffered_write] 2026/04/23 22:46:41 coverage filter: ^iomap_file_unshare$: [iomap_file_unshare] 2026/04/23 22:46:41 coverage filter: ^iomap_write_begin$: [iomap_write_begin] 2026/04/23 22:46:41 coverage filter: ^iomap_write_end$: [iomap_write_end] 2026/04/23 22:46:41 coverage filter: fs/iomap/buffered-io.c: [fs/iomap/buffered-io.c] 2026/04/23 22:46:41 coverage filter: fs/iomap/direct-io.c: [fs/iomap/direct-io.c] 2026/04/23 22:46:41 coverage filter: fs/ntfs/iomap.c: [] 2026/04/23 22:46:41 coverage filter: include/linux/iomap.h: [] 2026/04/23 22:46:41 area "symbols": 460 PCs in the cover filter 2026/04/23 22:46:41 area "files": 1756 PCs in the cover filter 2026/04/23 22:46:41 area "": 0 PCs in the cover filter 2026/04/23 22:46:41 executor cover filter: 0 PCs 2026/04/23 22:46:43 executor cover filter: 0 PCs 2026/04/23 22:46:48 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$khugepaged_scan : failed to open /sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$bcachefs : /proc/filesystems does not contain bcachefs syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$khugepaged_scan : fd_khugepaged_scan [openat$khugepaged_scan] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") MemoryDump : disabled by user NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 573/8210 2026/04/23 22:46:48 new: machine check complete 2026/04/23 22:46:48 new: adding 10885 seeds 2026/04/23 22:46:50 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$khugepaged_scan : failed to open /sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$bcachefs : /proc/filesystems does not contain bcachefs syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$khugepaged_scan : fd_khugepaged_scan [openat$khugepaged_scan] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") MemoryDump : disabled by user NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 573/8210 2026/04/23 22:46:50 base: machine check complete 2026/04/23 22:47:44 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 22:48:05 crash "UBSAN: array-index-out-of-bounds in dtSplitPage" is already known 2026/04/23 22:48:05 base crash "UBSAN: array-index-out-of-bounds in dtSplitPage" is to be ignored 2026/04/23 22:48:05 patched crashed: UBSAN: array-index-out-of-bounds in dtSplitPage [need repro = false] 2026/04/23 22:48:33 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:48:40 runner 1 connected 2026/04/23 22:48:50 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:49:05 runner 0 connected 2026/04/23 22:49:09 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:49:22 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:49:24 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 22:49:32 runner 6 connected 2026/04/23 22:49:57 runner 5 connected 2026/04/23 22:50:05 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:50:13 runner 1 connected 2026/04/23 22:50:19 runner 7 connected 2026/04/23 22:50:23 runner 1 connected 2026/04/23 22:50:25 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:50:29 STAT { "buffer too small": 0, "candidate triage jobs": 38, "candidates": 9560, "comps overflows": 0, "corpus": 1258, "corpus [files]": 53, "corpus [symbols]": 13, "cover overflows": 89, "coverage": 57429, "distributor delayed": 1725, "distributor undelayed": 1722, "distributor violated": 0, "exec candidate": 1325, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 2281, "exec total [new]": 5899, "exec triage": 4095, "executor restarts [base]": 53, "executor restarts [new]": 106, "fault jobs": 0, "fuzzer jobs": 38, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 58475, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1325, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 773, "reproducing": 0, "rpc recv": 861528416, "rpc sent": 105330688, "signal": 56489, "smash jobs": 0, "triage jobs": 0, "vm output": 2542033, "vm restarts [base]": 5, "vm restarts [new]": 14 } 2026/04/23 22:50:46 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:51:03 runner 2 connected 2026/04/23 22:51:18 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 22:51:24 base crash: general protection fault in lo_rw_aio 2026/04/23 22:51:31 runner 0 connected 2026/04/23 22:51:45 runner 4 connected 2026/04/23 22:52:16 runner 2 connected 2026/04/23 22:52:21 crash "kernel BUG in hfs_write_inode" is already known 2026/04/23 22:52:21 base crash "kernel BUG in hfs_write_inode" is to be ignored 2026/04/23 22:52:21 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 22:52:22 crash "kernel BUG in hfs_write_inode" is already known 2026/04/23 22:52:22 base crash "kernel BUG in hfs_write_inode" is to be ignored 2026/04/23 22:52:22 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 22:52:24 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:52:24 crash "kernel BUG in hfs_write_inode" is already known 2026/04/23 22:52:24 base crash "kernel BUG in hfs_write_inode" is to be ignored 2026/04/23 22:52:24 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 22:52:31 runner 0 connected 2026/04/23 22:52:35 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:53:09 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 22:53:20 runner 2 connected 2026/04/23 22:53:20 runner 7 connected 2026/04/23 22:53:22 runner 5 connected 2026/04/23 22:53:26 runner 6 connected 2026/04/23 22:53:32 runner 3 connected 2026/04/23 22:54:07 runner 2 connected 2026/04/23 22:55:29 STAT { "buffer too small": 0, "candidate triage jobs": 48, "candidates": 7920, "comps overflows": 0, "corpus": 2843, "corpus [files]": 105, "corpus [symbols]": 29, "cover overflows": 320, "coverage": 71026, "distributor delayed": 4314, "distributor undelayed": 4314, "distributor violated": 13, "exec candidate": 2965, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 4644, "exec total [new]": 13462, "exec triage": 9115, "executor restarts [base]": 83, "executor restarts [new]": 187, "fault jobs": 0, "fuzzer jobs": 48, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 0, "max signal": 72174, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2965, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 717, "reproducing": 0, "rpc recv": 1556266800, "rpc sent": 261983944, "signal": 69712, "smash jobs": 0, "triage jobs": 0, "vm output": 5716604, "vm restarts [base]": 8, "vm restarts [new]": 22 } 2026/04/23 22:55:49 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 22:56:03 crash "INFO: task hung in __writeback_inodes_sb_nr" is already known 2026/04/23 22:56:03 base crash "INFO: task hung in __writeback_inodes_sb_nr" is to be ignored 2026/04/23 22:56:03 patched crashed: INFO: task hung in __writeback_inodes_sb_nr [need repro = false] 2026/04/23 22:56:11 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:56:19 base crash: kernel BUG in hfs_write_inode 2026/04/23 22:56:38 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:56:46 runner 1 connected 2026/04/23 22:56:49 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:57:00 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:57:01 runner 4 connected 2026/04/23 22:57:09 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:57:10 runner 5 connected 2026/04/23 22:57:16 runner 0 connected 2026/04/23 22:57:21 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:57:37 runner 2 connected 2026/04/23 22:57:48 runner 1 connected 2026/04/23 22:57:54 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:57:58 runner 8 connected 2026/04/23 22:58:08 runner 7 connected 2026/04/23 22:58:20 runner 3 connected 2026/04/23 22:58:28 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 22:58:54 runner 6 connected 2026/04/23 22:59:14 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 22:59:32 runner 0 connected 2026/04/23 22:59:35 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 22:59:36 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:00:09 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:00:13 runner 0 connected 2026/04/23 23:00:29 STAT { "buffer too small": 0, "candidate triage jobs": 26, "candidates": 6343, "comps overflows": 0, "corpus": 4411, "corpus [files]": 144, "corpus [symbols]": 44, "cover overflows": 697, "coverage": 80225, "distributor delayed": 6796, "distributor undelayed": 6796, "distributor violated": 13, "exec candidate": 4542, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 7013, "exec total [new]": 21598, "exec triage": 13969, "executor restarts [base]": 106, "executor restarts [new]": 245, "fault jobs": 0, "fuzzer jobs": 26, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 81221, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 4541, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 730, "reproducing": 0, "rpc recv": 2231859080, "rpc sent": 416876400, "signal": 77039, "smash jobs": 0, "triage jobs": 0, "vm output": 8526570, "vm restarts [base]": 11, "vm restarts [new]": 31 } 2026/04/23 23:00:34 runner 6 connected 2026/04/23 23:00:35 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 23:00:42 runner 4 connected 2026/04/23 23:01:08 runner 5 connected 2026/04/23 23:01:12 crash "kernel BUG in txUnlock" is already known 2026/04/23 23:01:12 base crash "kernel BUG in txUnlock" is to be ignored 2026/04/23 23:01:12 patched crashed: kernel BUG in txUnlock [need repro = false] 2026/04/23 23:01:41 runner 1 connected 2026/04/23 23:02:18 runner 8 connected 2026/04/23 23:02:21 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:02:46 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:03:27 runner 1 connected 2026/04/23 23:03:28 patched crashed: KASAN: slab-use-after-free Read in txEnd [need repro = true] 2026/04/23 23:03:28 scheduled a reproduction of 'KASAN: slab-use-after-free Read in txEnd' 2026/04/23 23:03:30 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:03:33 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 23:03:43 runner 4 connected 2026/04/23 23:03:58 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:04:27 runner 5 connected 2026/04/23 23:04:34 runner 6 connected 2026/04/23 23:04:39 runner 8 connected 2026/04/23 23:04:57 runner 3 connected 2026/04/23 23:05:29 STAT { "buffer too small": 0, "candidate triage jobs": 22, "candidates": 5014, "comps overflows": 0, "corpus": 5705, "corpus [files]": 172, "corpus [symbols]": 60, "cover overflows": 1041, "coverage": 84407, "distributor delayed": 8705, "distributor undelayed": 8705, "distributor violated": 13, "exec candidate": 5871, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 9536, "exec total [new]": 29485, "exec triage": 18064, "executor restarts [base]": 133, "executor restarts [new]": 306, "fault jobs": 0, "fuzzer jobs": 22, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 0, "max signal": 85178, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 5870, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 718, "reproducing": 0, "rpc recv": 2842930324, "rpc sent": 569634480, "signal": 81030, "smash jobs": 0, "triage jobs": 0, "vm output": 11420876, "vm restarts [base]": 12, "vm restarts [new]": 41 } 2026/04/23 23:06:03 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:06:06 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:06:10 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:06:26 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:07:05 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:07:08 runner 6 connected 2026/04/23 23:07:10 runner 7 connected 2026/04/23 23:07:10 runner 0 connected 2026/04/23 23:07:29 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 23:07:32 runner 5 connected 2026/04/23 23:07:42 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 23:08:04 runner 2 connected 2026/04/23 23:08:17 base crash: general protection fault in lo_rw_aio 2026/04/23 23:08:19 crash "kernel BUG in txUnlock" is already known 2026/04/23 23:08:19 base crash "kernel BUG in txUnlock" is to be ignored 2026/04/23 23:08:19 patched crashed: kernel BUG in txUnlock [need repro = false] 2026/04/23 23:08:20 crash "kernel BUG in txUnlock" is already known 2026/04/23 23:08:20 base crash "kernel BUG in txUnlock" is to be ignored 2026/04/23 23:08:20 patched crashed: kernel BUG in txUnlock [need repro = false] 2026/04/23 23:08:22 crash "kernel BUG in txUnlock" is already known 2026/04/23 23:08:22 base crash "kernel BUG in txUnlock" is to be ignored 2026/04/23 23:08:22 patched crashed: kernel BUG in txUnlock [need repro = false] 2026/04/23 23:08:26 crash "kernel BUG in txUnlock" is already known 2026/04/23 23:08:26 base crash "kernel BUG in txUnlock" is to be ignored 2026/04/23 23:08:26 patched crashed: kernel BUG in txUnlock [need repro = false] 2026/04/23 23:08:27 runner 1 connected 2026/04/23 23:08:46 runner 8 connected 2026/04/23 23:09:08 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:09:23 runner 0 connected 2026/04/23 23:09:24 runner 5 connected 2026/04/23 23:09:25 runner 6 connected 2026/04/23 23:09:27 runner 0 connected 2026/04/23 23:09:29 runner 4 connected 2026/04/23 23:09:51 crash "KASAN: slab-use-after-free Read in jfs_syncpt" is already known 2026/04/23 23:09:51 base crash "KASAN: slab-use-after-free Read in jfs_syncpt" is to be ignored 2026/04/23 23:09:51 patched crashed: KASAN: slab-use-after-free Read in jfs_syncpt [need repro = false] 2026/04/23 23:10:00 base crash: possible deadlock in hfs_extend_file 2026/04/23 23:10:09 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:10:13 runner 3 connected 2026/04/23 23:10:22 crash "WARNING in bfs_get_block" is already known 2026/04/23 23:10:22 base crash "WARNING in bfs_get_block" is to be ignored 2026/04/23 23:10:22 patched crashed: WARNING in bfs_get_block [need repro = false] 2026/04/23 23:10:29 STAT { "buffer too small": 0, "candidate triage jobs": 4, "candidates": 4573, "comps overflows": 0, "corpus": 6137, "corpus [files]": 193, "corpus [symbols]": 70, "cover overflows": 1371, "coverage": 86204, "distributor delayed": 9511, "distributor undelayed": 9510, "distributor violated": 14, "exec candidate": 6312, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 12550, "exec total [new]": 36374, "exec triage": 19492, "executor restarts [base]": 148, "executor restarts [new]": 364, "fault jobs": 0, "fuzzer jobs": 4, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 87011, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6308, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 689, "reproducing": 0, "rpc recv": 3451233952, "rpc sent": 736759360, "signal": 83760, "smash jobs": 0, "triage jobs": 0, "vm output": 13810068, "vm restarts [base]": 13, "vm restarts [new]": 53 } 2026/04/23 23:10:45 crash "WARNING in bfs_get_block" is already known 2026/04/23 23:10:45 base crash "WARNING in bfs_get_block" is to be ignored 2026/04/23 23:10:45 patched crashed: WARNING in bfs_get_block [need repro = false] 2026/04/23 23:10:48 runner 1 connected 2026/04/23 23:10:48 base crash: kernel BUG in hfs_write_inode 2026/04/23 23:10:59 runner 1 connected 2026/04/23 23:11:07 runner 5 connected 2026/04/23 23:11:11 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 23:11:13 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:11:21 runner 7 connected 2026/04/23 23:11:43 runner 3 connected 2026/04/23 23:11:48 runner 0 connected 2026/04/23 23:11:50 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:12:10 runner 2 connected 2026/04/23 23:12:11 runner 0 connected 2026/04/23 23:12:38 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:12:39 crash "KASAN: use-after-free Read in copy_folio_from_iter_atomic" is already known 2026/04/23 23:12:39 base crash "KASAN: use-after-free Read in copy_folio_from_iter_atomic" is to be ignored 2026/04/23 23:12:39 patched crashed: KASAN: use-after-free Read in copy_folio_from_iter_atomic [need repro = false] 2026/04/23 23:12:56 runner 8 connected 2026/04/23 23:12:58 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:13:26 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:13:43 runner 2 connected 2026/04/23 23:13:44 runner 4 connected 2026/04/23 23:13:46 patched crashed: KASAN: slab-use-after-free Read in txEnd [need repro = true] 2026/04/23 23:13:46 scheduled a reproduction of 'KASAN: slab-use-after-free Read in txEnd' 2026/04/23 23:13:57 runner 0 connected 2026/04/23 23:14:23 runner 3 connected 2026/04/23 23:14:31 base crash: kernel BUG in txUnlock 2026/04/23 23:14:37 failed to recv *flatrpc.InfoRequestRawT: EOF 2026/04/23 23:14:37 crash "WARNING: bad unlock balance in __zap_vma_range" is already known 2026/04/23 23:14:37 base crash "WARNING: bad unlock balance in __zap_vma_range" is to be ignored 2026/04/23 23:14:37 patched crashed: WARNING: bad unlock balance in __zap_vma_range [need repro = false] 2026/04/23 23:14:45 runner 6 connected 2026/04/23 23:14:59 triaged 90.6% of the corpus 2026/04/23 23:14:59 starting bug reproductions 2026/04/23 23:14:59 starting bug reproductions (max 6 VMs, 4 repros) 2026/04/23 23:14:59 start reproducing 'KASAN: slab-use-after-free Read in txEnd' 2026/04/23 23:15:08 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:15:11 base crash: general protection fault in lo_rw_aio 2026/04/23 23:15:12 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:15:20 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 23:15:21 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 23:15:29 STAT { "buffer too small": 0, "candidate triage jobs": 6, "candidates": 168, "comps overflows": 0, "corpus": 6261, "corpus [files]": 200, "corpus [symbols]": 75, "cover overflows": 1695, "coverage": 86830, "distributor delayed": 9770, "distributor undelayed": 9766, "distributor violated": 14, "exec candidate": 10717, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 15468, "exec total [new]": 45182, "exec triage": 19984, "executor restarts [base]": 170, "executor restarts [new]": 437, "fault jobs": 0, "fuzzer jobs": 6, "fuzzing VMs [base]": 0, "fuzzing VMs [new]": 3, "hints jobs": 0, "max signal": 87639, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6453, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 268, "reproducing": 1, "rpc recv": 3992191736, "rpc sent": 896716816, "signal": 84349, "smash jobs": 0, "triage jobs": 0, "vm output": 16305760, "vm restarts [base]": 16, "vm restarts [new]": 64 } 2026/04/23 23:15:35 runner 3 connected 2026/04/23 23:15:38 runner 0 connected 2026/04/23 23:15:59 triaged 99.9% of the corpus 2026/04/23 23:16:09 runner 5 connected 2026/04/23 23:16:10 runner 2 connected 2026/04/23 23:16:12 runner 8 connected 2026/04/23 23:16:19 runner 1 connected 2026/04/23 23:16:19 runner 6 connected 2026/04/23 23:16:45 base crash: kernel BUG in hfs_write_inode 2026/04/23 23:17:08 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/23 23:17:50 runner 0 connected 2026/04/23 23:18:14 runner 1 connected 2026/04/23 23:20:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 25, "corpus": 6336, "corpus [files]": 210, "corpus [symbols]": 84, "cover overflows": 3262, "coverage": 87124, "distributor delayed": 10011, "distributor undelayed": 10011, "distributor violated": 14, "exec candidate": 10885, "exec collide": 268, "exec fuzz": 520, "exec gen": 20, "exec hints": 75, "exec inject": 0, "exec minimize": 1584, "exec retries": 0, "exec seeds": 141, "exec smash": 273, "exec total [base]": 17491, "exec total [new]": 48720, "exec triage": 20464, "executor restarts [base]": 194, "executor restarts [new]": 493, "fault jobs": 0, "fuzzer jobs": 147, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 52, "max signal": 88486, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1054, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6620, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 1505, "reproducing": 1, "rpc recv": 4490671104, "rpc sent": 1163990416, "signal": 84818, "smash jobs": 66, "triage jobs": 29, "vm output": 19424071, "vm restarts [base]": 21, "vm restarts [new]": 68 } 2026/04/23 23:22:54 crash "WARNING in udf_truncate_extents" is already known 2026/04/23 23:22:54 base crash "WARNING in udf_truncate_extents" is to be ignored 2026/04/23 23:22:54 patched crashed: WARNING in udf_truncate_extents [need repro = false] 2026/04/23 23:23:52 runner 3 connected 2026/04/23 23:24:01 base crash: KASAN: use-after-free Read in copy_folio_from_iter_atomic 2026/04/23 23:25:06 runner 0 connected 2026/04/23 23:25:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 61, "corpus": 6402, "corpus [files]": 226, "corpus [symbols]": 99, "cover overflows": 4423, "coverage": 87449, "distributor delayed": 10141, "distributor undelayed": 10141, "distributor violated": 14, "exec candidate": 10885, "exec collide": 452, "exec fuzz": 896, "exec gen": 35, "exec hints": 161, "exec inject": 0, "exec minimize": 2932, "exec retries": 0, "exec seeds": 300, "exec smash": 601, "exec total [base]": 19064, "exec total [new]": 51518, "exec triage": 20765, "executor restarts [base]": 221, "executor restarts [new]": 527, "fault jobs": 0, "fuzzer jobs": 255, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 91, "max signal": 89308, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1937, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6733, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 1807, "reproducing": 1, "rpc recv": 4764705820, "rpc sent": 1417744000, "signal": 85059, "smash jobs": 133, "triage jobs": 31, "vm output": 23122214, "vm restarts [base]": 22, "vm restarts [new]": 69 } 2026/04/23 23:27:50 crash "WARNING in udf_truncate_extents" is already known 2026/04/23 23:27:50 base crash "WARNING in udf_truncate_extents" is to be ignored 2026/04/23 23:27:50 patched crashed: WARNING in udf_truncate_extents [need repro = false] 2026/04/23 23:28:49 runner 5 connected 2026/04/23 23:29:46 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/23 23:30:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 107, "corpus": 6466, "corpus [files]": 235, "corpus [symbols]": 107, "cover overflows": 5757, "coverage": 87764, "distributor delayed": 10319, "distributor undelayed": 10318, "distributor violated": 14, "exec candidate": 10885, "exec collide": 697, "exec fuzz": 1348, "exec gen": 74, "exec hints": 276, "exec inject": 0, "exec minimize": 4075, "exec retries": 0, "exec seeds": 484, "exec smash": 1037, "exec total [base]": 20329, "exec total [new]": 54453, "exec triage": 21088, "executor restarts [base]": 236, "executor restarts [new]": 552, "fault jobs": 0, "fuzzer jobs": 342, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 123, "max signal": 89936, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 2645, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6846, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 1502, "reproducing": 1, "rpc recv": 5028376752, "rpc sent": 1698407728, "signal": 85280, "smash jobs": 190, "triage jobs": 29, "vm output": 26019934, "vm restarts [base]": 22, "vm restarts [new]": 70 } 2026/04/23 23:30:52 runner 8 connected 2026/04/23 23:35:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 130, "corpus": 6507, "corpus [files]": 236, "corpus [symbols]": 108, "cover overflows": 6768, "coverage": 87946, "distributor delayed": 10465, "distributor undelayed": 10465, "distributor violated": 14, "exec candidate": 10885, "exec collide": 900, "exec fuzz": 1766, "exec gen": 93, "exec hints": 387, "exec inject": 0, "exec minimize": 4946, "exec retries": 5, "exec seeds": 613, "exec smash": 1432, "exec total [base]": 21523, "exec total [new]": 56862, "exec triage": 21344, "executor restarts [base]": 253, "executor restarts [new]": 601, "fault jobs": 0, "fuzzer jobs": 364, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 122, "max signal": 90369, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 3332, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6936, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 1716, "reproducing": 1, "rpc recv": 5264128140, "rpc sent": 1939268568, "signal": 85476, "smash jobs": 221, "triage jobs": 21, "vm output": 28763072, "vm restarts [base]": 22, "vm restarts [new]": 71 } 2026/04/23 23:37:43 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:38:40 runner 4 connected 2026/04/23 23:40:07 base crash: kernel BUG in hfs_write_inode 2026/04/23 23:40:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 152, "corpus": 6543, "corpus [files]": 240, "corpus [symbols]": 112, "cover overflows": 7942, "coverage": 88067, "distributor delayed": 10547, "distributor undelayed": 10547, "distributor violated": 14, "exec candidate": 10885, "exec collide": 1149, "exec fuzz": 2166, "exec gen": 113, "exec hints": 509, "exec inject": 0, "exec minimize": 5791, "exec retries": 7, "exec seeds": 727, "exec smash": 1868, "exec total [base]": 22474, "exec total [new]": 59241, "exec triage": 21533, "executor restarts [base]": 266, "executor restarts [new]": 641, "fault jobs": 0, "fuzzer jobs": 396, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 126, "max signal": 90605, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 3885, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7007, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 1911, "reproducing": 1, "rpc recv": 5452050532, "rpc sent": 2170156992, "signal": 85570, "smash jobs": 250, "triage jobs": 20, "vm output": 31310040, "vm restarts [base]": 22, "vm restarts [new]": 72 } 2026/04/23 23:41:13 runner 1 connected 2026/04/23 23:44:28 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:45:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 170, "corpus": 6576, "corpus [files]": 244, "corpus [symbols]": 116, "cover overflows": 8739, "coverage": 88290, "distributor delayed": 10639, "distributor undelayed": 10639, "distributor violated": 14, "exec candidate": 10885, "exec collide": 1315, "exec fuzz": 2516, "exec gen": 130, "exec hints": 610, "exec inject": 0, "exec minimize": 6498, "exec retries": 13, "exec seeds": 812, "exec smash": 2218, "exec total [base]": 23314, "exec total [new]": 61178, "exec triage": 21701, "executor restarts [base]": 282, "executor restarts [new]": 673, "fault jobs": 0, "fuzzer jobs": 427, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 133, "max signal": 90813, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 4341, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7066, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 2318, "reproducing": 1, "rpc recv": 5621743144, "rpc sent": 2363047752, "signal": 85659, "smash jobs": 274, "triage jobs": 20, "vm output": 33687538, "vm restarts [base]": 23, "vm restarts [new]": 72 } 2026/04/23 23:45:33 runner 8 connected 2026/04/23 23:45:59 fuzzer has reached the modified code (117 + 245 + 0), continuing fuzzing 2026/04/23 23:50:09 crash "WARNING in udf_truncate_extents" is already known 2026/04/23 23:50:09 base crash "WARNING in udf_truncate_extents" is to be ignored 2026/04/23 23:50:09 patched crashed: WARNING in udf_truncate_extents [need repro = false] 2026/04/23 23:50:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 189, "corpus": 6615, "corpus [files]": 254, "corpus [symbols]": 125, "cover overflows": 9599, "coverage": 88447, "distributor delayed": 10731, "distributor undelayed": 10731, "distributor violated": 14, "exec candidate": 10885, "exec collide": 1543, "exec fuzz": 2969, "exec gen": 159, "exec hints": 733, "exec inject": 0, "exec minimize": 7163, "exec retries": 19, "exec seeds": 923, "exec smash": 2694, "exec total [base]": 24378, "exec total [new]": 63440, "exec triage": 21876, "executor restarts [base]": 296, "executor restarts [new]": 721, "fault jobs": 0, "fuzzer jobs": 470, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 146, "max signal": 91144, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 4815, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7133, "no exec duration": 31988000000, "no exec requests": 85, "pending": 1, "prog exec time": 2946, "reproducing": 1, "rpc recv": 5811815316, "rpc sent": 2593364312, "signal": 85795, "smash jobs": 309, "triage jobs": 15, "vm output": 36761958, "vm restarts [base]": 23, "vm restarts [new]": 73 } 2026/04/23 23:50:43 repro finished 'KASAN: slab-use-after-free Read in txEnd', repro=false crepro=false desc='' hub=false from_dashboard=false 2026/04/23 23:50:43 failed repro for "KASAN: slab-use-after-free Read in txEnd", err=%!s() 2026/04/23 23:50:43 "KASAN: slab-use-after-free Read in txEnd": saved crash log into 1776988243.crash.log 2026/04/23 23:50:43 "KASAN: slab-use-after-free Read in txEnd": saved repro log into 1776988243.repro.log 2026/04/23 23:50:43 start reproducing 'KASAN: slab-use-after-free Read in txEnd' 2026/04/23 23:51:14 runner 6 connected 2026/04/23 23:51:24 base crash: KASAN: use-after-free Read in copy_folio_from_iter_atomic 2026/04/23 23:52:30 runner 0 connected 2026/04/23 23:54:08 crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2026/04/23 23:54:08 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is to be ignored 2026/04/23 23:54:08 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2026/04/23 23:54:27 crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2026/04/23 23:54:27 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is to be ignored 2026/04/23 23:54:27 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2026/04/23 23:54:53 patched crashed: KASAN: use-after-free Read in copy_folio_from_iter_atomic [need repro = false] 2026/04/23 23:55:07 runner 4 connected 2026/04/23 23:55:24 runner 5 connected 2026/04/23 23:55:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 209, "corpus": 6642, "corpus [files]": 258, "corpus [symbols]": 129, "cover overflows": 10344, "coverage": 88697, "distributor delayed": 10831, "distributor undelayed": 10831, "distributor violated": 14, "exec candidate": 10885, "exec collide": 1793, "exec fuzz": 3403, "exec gen": 178, "exec hints": 842, "exec inject": 0, "exec minimize": 7770, "exec retries": 23, "exec seeds": 1033, "exec smash": 3172, "exec total [base]": 25427, "exec total [new]": 65642, "exec triage": 22067, "executor restarts [base]": 315, "executor restarts [new]": 751, "fault jobs": 0, "fuzzer jobs": 498, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 150, "max signal": 91481, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 5217, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7202, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1555, "reproducing": 1, "rpc recv": 6071717480, "rpc sent": 2808010160, "signal": 85893, "smash jobs": 330, "triage jobs": 18, "vm output": 39904914, "vm restarts [base]": 24, "vm restarts [new]": 76 } 2026/04/23 23:55:58 runner 2 connected 2026/04/23 23:57:06 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:57:38 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/23 23:58:05 runner 7 connected 2026/04/23 23:58:37 runner 3 connected 2026/04/24 00:00:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 248, "corpus": 6674, "corpus [files]": 265, "corpus [symbols]": 133, "cover overflows": 11334, "coverage": 88889, "distributor delayed": 10939, "distributor undelayed": 10939, "distributor violated": 14, "exec candidate": 10885, "exec collide": 2071, "exec fuzz": 3921, "exec gen": 206, "exec hints": 999, "exec inject": 0, "exec minimize": 8475, "exec retries": 24, "exec seeds": 1137, "exec smash": 3736, "exec total [base]": 26484, "exec total [new]": 68194, "exec triage": 22260, "executor restarts [base]": 339, "executor restarts [new]": 827, "fault jobs": 0, "fuzzer jobs": 510, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 145, "max signal": 91822, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 5883, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7277, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1888, "reproducing": 1, "rpc recv": 6364624152, "rpc sent": 3056936352, "signal": 86025, "smash jobs": 346, "triage jobs": 19, "vm output": 43071228, "vm restarts [base]": 24, "vm restarts [new]": 79 } 2026/04/24 00:01:47 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/24 00:02:44 runner 5 connected 2026/04/24 00:03:43 crash "kernel BUG in jfs_evict_inode" is already known 2026/04/24 00:03:43 base crash "kernel BUG in jfs_evict_inode" is to be ignored 2026/04/24 00:03:43 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2026/04/24 00:04:17 crash "INFO: task hung in lmLogClose" is already known 2026/04/24 00:04:17 base crash "INFO: task hung in lmLogClose" is to be ignored 2026/04/24 00:04:17 patched crashed: INFO: task hung in lmLogClose [need repro = false] 2026/04/24 00:04:41 runner 7 connected 2026/04/24 00:04:43 crash "INFO: task hung in lmLogClose" is already known 2026/04/24 00:04:43 base crash "INFO: task hung in lmLogClose" is to be ignored 2026/04/24 00:04:43 patched crashed: INFO: task hung in lmLogClose [need repro = false] 2026/04/24 00:05:13 crash "INFO: task hung in lmLogClose" is already known 2026/04/24 00:05:13 base crash "INFO: task hung in lmLogClose" is to be ignored 2026/04/24 00:05:13 patched crashed: INFO: task hung in lmLogClose [need repro = false] 2026/04/24 00:05:18 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/24 00:05:22 runner 3 connected 2026/04/24 00:05:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 269, "corpus": 6690, "corpus [files]": 266, "corpus [symbols]": 133, "cover overflows": 12264, "coverage": 89004, "distributor delayed": 11039, "distributor undelayed": 11037, "distributor violated": 14, "exec candidate": 10885, "exec collide": 2229, "exec fuzz": 4269, "exec gen": 226, "exec hints": 1093, "exec inject": 0, "exec minimize": 9060, "exec retries": 24, "exec seeds": 1197, "exec smash": 4112, "exec total [base]": 27456, "exec total [new]": 69992, "exec triage": 22423, "executor restarts [base]": 366, "executor restarts [new]": 909, "fault jobs": 0, "fuzzer jobs": 492, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 3, "hints jobs": 134, "max signal": 92358, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 6497, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7333, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1579, "reproducing": 1, "rpc recv": 6573347548, "rpc sent": 3250344296, "signal": 86143, "smash jobs": 343, "triage jobs": 15, "vm output": 45489538, "vm restarts [base]": 24, "vm restarts [new]": 82 } 2026/04/24 00:05:41 runner 2 connected 2026/04/24 00:06:11 runner 8 connected 2026/04/24 00:06:17 runner 6 connected 2026/04/24 00:07:44 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/24 00:08:42 runner 0 connected 2026/04/24 00:09:05 crash "possible deadlock in ocfs2_init_acl" is already known 2026/04/24 00:09:05 base crash "possible deadlock in ocfs2_init_acl" is to be ignored 2026/04/24 00:09:05 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:09:07 crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2026/04/24 00:09:07 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is to be ignored 2026/04/24 00:09:07 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2026/04/24 00:09:13 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2026/04/24 00:10:10 runner 2 connected 2026/04/24 00:10:11 runner 4 connected 2026/04/24 00:10:19 runner 2 connected 2026/04/24 00:10:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 282, "corpus": 6731, "corpus [files]": 268, "corpus [symbols]": 134, "cover overflows": 13389, "coverage": 89228, "distributor delayed": 11167, "distributor undelayed": 11167, "distributor violated": 14, "exec candidate": 10885, "exec collide": 2471, "exec fuzz": 4752, "exec gen": 247, "exec hints": 1220, "exec inject": 0, "exec minimize": 10080, "exec retries": 24, "exec seeds": 1277, "exec smash": 4653, "exec total [base]": 28139, "exec total [new]": 72735, "exec triage": 22646, "executor restarts [base]": 394, "executor restarts [new]": 950, "fault jobs": 0, "fuzzer jobs": 549, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 147, "max signal": 92714, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 7150, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7413, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1648, "reproducing": 1, "rpc recv": 6919421488, "rpc sent": 3462108624, "signal": 86279, "smash jobs": 376, "triage jobs": 26, "vm output": 49177384, "vm restarts [base]": 26, "vm restarts [new]": 87 } 2026/04/24 00:11:21 crash "possible deadlock in ocfs2_init_acl" is already known 2026/04/24 00:11:21 base crash "possible deadlock in ocfs2_init_acl" is to be ignored 2026/04/24 00:11:21 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:12:19 runner 6 connected 2026/04/24 00:13:00 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/24 00:13:59 runner 0 connected 2026/04/24 00:14:14 crash "possible deadlock in ocfs2_init_acl" is already known 2026/04/24 00:14:14 base crash "possible deadlock in ocfs2_init_acl" is to be ignored 2026/04/24 00:14:14 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:15:19 runner 4 connected 2026/04/24 00:15:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 307, "corpus": 6771, "corpus [files]": 273, "corpus [symbols]": 137, "cover overflows": 14587, "coverage": 89476, "distributor delayed": 11276, "distributor undelayed": 11276, "distributor violated": 14, "exec candidate": 10885, "exec collide": 2716, "exec fuzz": 5206, "exec gen": 273, "exec hints": 1330, "exec inject": 0, "exec minimize": 11153, "exec retries": 26, "exec seeds": 1371, "exec smash": 5171, "exec total [base]": 29291, "exec total [new]": 75441, "exec triage": 22827, "executor restarts [base]": 419, "executor restarts [new]": 984, "fault jobs": 0, "fuzzer jobs": 591, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 162, "max signal": 93239, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 7758, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7480, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1982, "reproducing": 1, "rpc recv": 7217645376, "rpc sent": 3726117544, "signal": 86609, "smash jobs": 400, "triage jobs": 29, "vm output": 52917465, "vm restarts [base]": 27, "vm restarts [new]": 89 } 2026/04/24 00:16:44 base crash: possible deadlock in ocfs2_init_acl 2026/04/24 00:16:47 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/24 00:17:07 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:17:47 runner 2 connected 2026/04/24 00:17:54 runner 1 connected 2026/04/24 00:18:04 runner 8 connected 2026/04/24 00:19:06 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2026/04/24 00:20:05 runner 0 connected 2026/04/24 00:20:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 350, "corpus": 6816, "corpus [files]": 279, "corpus [symbols]": 143, "cover overflows": 15829, "coverage": 89788, "distributor delayed": 11396, "distributor undelayed": 11396, "distributor violated": 14, "exec candidate": 10885, "exec collide": 2988, "exec fuzz": 5683, "exec gen": 294, "exec hints": 1439, "exec inject": 0, "exec minimize": 12018, "exec retries": 26, "exec seeds": 1489, "exec smash": 5716, "exec total [base]": 30253, "exec total [new]": 78080, "exec triage": 23058, "executor restarts [base]": 436, "executor restarts [new]": 1011, "fault jobs": 0, "fuzzer jobs": 641, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 190, "max signal": 93576, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 8289, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7561, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1957, "reproducing": 1, "rpc recv": 7516814280, "rpc sent": 3967839912, "signal": 86896, "smash jobs": 429, "triage jobs": 22, "vm output": 56432668, "vm restarts [base]": 30, "vm restarts [new]": 90 } 2026/04/24 00:25:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 406, "corpus": 6851, "corpus [files]": 280, "corpus [symbols]": 144, "cover overflows": 16920, "coverage": 89964, "distributor delayed": 11496, "distributor undelayed": 11496, "distributor violated": 14, "exec candidate": 10885, "exec collide": 3243, "exec fuzz": 6196, "exec gen": 331, "exec hints": 1559, "exec inject": 0, "exec minimize": 12738, "exec retries": 28, "exec seeds": 1610, "exec smash": 6276, "exec total [base]": 31502, "exec total [new]": 80589, "exec triage": 23240, "executor restarts [base]": 447, "executor restarts [new]": 1043, "fault jobs": 0, "fuzzer jobs": 658, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 188, "max signal": 94187, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 8843, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7624, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 2609, "reproducing": 1, "rpc recv": 7726782056, "rpc sent": 4213850632, "signal": 87061, "smash jobs": 450, "triage jobs": 20, "vm output": 59729267, "vm restarts [base]": 30, "vm restarts [new]": 90 } 2026/04/24 00:26:36 base crash: possible deadlock in ocfs2_init_acl 2026/04/24 00:27:43 runner 2 connected 2026/04/24 00:28:19 crash "kernel BUG in dbFindLeaf" is already known 2026/04/24 00:28:19 base crash "kernel BUG in dbFindLeaf" is to be ignored 2026/04/24 00:28:19 patched crashed: kernel BUG in dbFindLeaf [need repro = false] 2026/04/24 00:28:58 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:29:25 runner 8 connected 2026/04/24 00:29:57 runner 7 connected 2026/04/24 00:30:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 448, "corpus": 6883, "corpus [files]": 281, "corpus [symbols]": 145, "cover overflows": 17890, "coverage": 90323, "distributor delayed": 11576, "distributor undelayed": 11576, "distributor violated": 14, "exec candidate": 10885, "exec collide": 3484, "exec fuzz": 6670, "exec gen": 351, "exec hints": 1675, "exec inject": 0, "exec minimize": 13370, "exec retries": 28, "exec seeds": 1712, "exec smash": 6795, "exec total [base]": 32666, "exec total [new]": 82851, "exec triage": 23395, "executor restarts [base]": 455, "executor restarts [new]": 1074, "fault jobs": 0, "fuzzer jobs": 667, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 187, "max signal": 94751, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 9296, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7681, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1834, "reproducing": 1, "rpc recv": 8007576284, "rpc sent": 4433587848, "signal": 87378, "smash jobs": 462, "triage jobs": 18, "vm output": 63095463, "vm restarts [base]": 31, "vm restarts [new]": 92 } 2026/04/24 00:30:34 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/24 00:31:39 runner 2 connected 2026/04/24 00:32:03 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:32:49 base crash: KASAN: slab-use-after-free Read in lbmIODone 2026/04/24 00:33:02 runner 4 connected 2026/04/24 00:33:55 runner 2 connected 2026/04/24 00:35:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 499, "corpus": 6913, "corpus [files]": 285, "corpus [symbols]": 149, "cover overflows": 18927, "coverage": 90419, "distributor delayed": 11675, "distributor undelayed": 11675, "distributor violated": 14, "exec candidate": 10885, "exec collide": 3707, "exec fuzz": 7180, "exec gen": 377, "exec hints": 1792, "exec inject": 0, "exec minimize": 14115, "exec retries": 29, "exec seeds": 1810, "exec smash": 7333, "exec total [base]": 33677, "exec total [new]": 85268, "exec triage": 23557, "executor restarts [base]": 471, "executor restarts [new]": 1115, "fault jobs": 0, "fuzzer jobs": 681, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 181, "max signal": 94910, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 9748, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7742, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1979, "reproducing": 1, "rpc recv": 8264853944, "rpc sent": 4649159720, "signal": 87476, "smash jobs": 479, "triage jobs": 21, "vm output": 66933748, "vm restarts [base]": 32, "vm restarts [new]": 94 } 2026/04/24 00:39:41 crash "WARNING in ifs_free" is already known 2026/04/24 00:39:41 base crash "WARNING in ifs_free" is to be ignored 2026/04/24 00:39:41 patched crashed: WARNING in ifs_free [need repro = false] 2026/04/24 00:40:27 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2026/04/24 00:40:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 546, "corpus": 6943, "corpus [files]": 289, "corpus [symbols]": 152, "cover overflows": 19829, "coverage": 90662, "distributor delayed": 11763, "distributor undelayed": 11763, "distributor violated": 14, "exec candidate": 10885, "exec collide": 3924, "exec fuzz": 7622, "exec gen": 394, "exec hints": 1894, "exec inject": 0, "exec minimize": 14788, "exec retries": 29, "exec seeds": 1892, "exec smash": 7825, "exec total [base]": 34763, "exec total [new]": 87444, "exec triage": 23708, "executor restarts [base]": 487, "executor restarts [new]": 1159, "fault jobs": 0, "fuzzer jobs": 693, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 186, "max signal": 95402, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10144, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7797, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1692, "reproducing": 1, "rpc recv": 8429850100, "rpc sent": 4874905360, "signal": 87586, "smash jobs": 490, "triage jobs": 17, "vm output": 70111394, "vm restarts [base]": 32, "vm restarts [new]": 94 } 2026/04/24 00:40:39 runner 4 connected 2026/04/24 00:41:20 base crash: possible deadlock in ocfs2_init_acl 2026/04/24 00:41:26 runner 8 connected 2026/04/24 00:42:18 runner 1 connected 2026/04/24 00:42:26 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:42:43 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 00:42:47 base crash: possible deadlock in ocfs2_init_acl 2026/04/24 00:43:30 runner 3 connected 2026/04/24 00:43:41 runner 6 connected 2026/04/24 00:43:45 runner 2 connected 2026/04/24 00:43:54 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/24 00:45:00 runner 5 connected 2026/04/24 00:45:22 patched crashed: KASAN: use-after-free Read in copy_folio_from_iter_atomic [need repro = false] 2026/04/24 00:45:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 595, "corpus": 6965, "corpus [files]": 290, "corpus [symbols]": 153, "cover overflows": 20724, "coverage": 90717, "distributor delayed": 11844, "distributor undelayed": 11844, "distributor violated": 14, "exec candidate": 10885, "exec collide": 4165, "exec fuzz": 8086, "exec gen": 408, "exec hints": 2002, "exec inject": 0, "exec minimize": 15325, "exec retries": 29, "exec seeds": 1981, "exec smash": 8348, "exec total [base]": 35737, "exec total [new]": 89554, "exec triage": 23835, "executor restarts [base]": 504, "executor restarts [new]": 1205, "fault jobs": 0, "fuzzer jobs": 683, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 186, "max signal": 95663, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10580, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7841, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 2092, "reproducing": 1, "rpc recv": 8802809724, "rpc sent": 5095591664, "signal": 87639, "smash jobs": 486, "triage jobs": 11, "vm output": 74473902, "vm restarts [base]": 34, "vm restarts [new]": 99 } 2026/04/24 00:45:52 crash "INFO: task hung in __iterate_supers" is already known 2026/04/24 00:45:52 base crash "INFO: task hung in __iterate_supers" is to be ignored 2026/04/24 00:45:52 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 00:46:12 crash "INFO: task hung in __iterate_supers" is already known 2026/04/24 00:46:12 base crash "INFO: task hung in __iterate_supers" is to be ignored 2026/04/24 00:46:12 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 00:46:28 runner 3 connected 2026/04/24 00:46:37 base crash: INFO: task hung in __iterate_supers 2026/04/24 00:46:51 runner 7 connected 2026/04/24 00:47:12 runner 2 connected 2026/04/24 00:47:35 runner 1 connected 2026/04/24 00:48:02 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 00:48:25 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/24 00:49:00 runner 4 connected 2026/04/24 00:49:24 runner 6 connected 2026/04/24 00:49:26 base crash: INFO: task hung in __iterate_supers 2026/04/24 00:50:05 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/24 00:50:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 630, "corpus": 6974, "corpus [files]": 291, "corpus [symbols]": 154, "cover overflows": 21477, "coverage": 90782, "distributor delayed": 11919, "distributor undelayed": 11918, "distributor violated": 14, "exec candidate": 10885, "exec collide": 4395, "exec fuzz": 8524, "exec gen": 432, "exec hints": 2117, "exec inject": 0, "exec minimize": 15770, "exec retries": 29, "exec seeds": 2057, "exec smash": 8855, "exec total [base]": 36514, "exec total [new]": 91492, "exec triage": 23939, "executor restarts [base]": 522, "executor restarts [new]": 1260, "fault jobs": 0, "fuzzer jobs": 656, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 6, "hints jobs": 166, "max signal": 95978, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10959, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7883, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1893, "reproducing": 1, "rpc recv": 9118978140, "rpc sent": 5282818472, "signal": 87651, "smash jobs": 469, "triage jobs": 21, "vm output": 78462264, "vm restarts [base]": 35, "vm restarts [new]": 104 } 2026/04/24 00:50:33 runner 2 connected 2026/04/24 00:51:11 runner 2 connected 2026/04/24 00:52:14 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 00:52:36 base crash: INFO: task hung in __iterate_supers 2026/04/24 00:53:12 runner 8 connected 2026/04/24 00:53:41 runner 1 connected 2026/04/24 00:53:43 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 00:54:47 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2026/04/24 00:54:49 runner 6 connected 2026/04/24 00:55:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 665, "corpus": 6995, "corpus [files]": 294, "corpus [symbols]": 156, "cover overflows": 22273, "coverage": 90840, "distributor delayed": 11992, "distributor undelayed": 11992, "distributor violated": 14, "exec candidate": 10885, "exec collide": 4647, "exec fuzz": 8966, "exec gen": 458, "exec hints": 2234, "exec inject": 0, "exec minimize": 16346, "exec retries": 29, "exec seeds": 2129, "exec smash": 9381, "exec total [base]": 37427, "exec total [new]": 93622, "exec triage": 24060, "executor restarts [base]": 544, "executor restarts [new]": 1316, "fault jobs": 0, "fuzzer jobs": 623, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 157, "max signal": 96103, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 11383, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7925, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1673, "reproducing": 1, "rpc recv": 9416658392, "rpc sent": 5493429864, "signal": 87693, "smash jobs": 456, "triage jobs": 10, "vm output": 81760685, "vm restarts [base]": 37, "vm restarts [new]": 107 } 2026/04/24 00:55:36 crash "WARNING in dbAdjTree" is already known 2026/04/24 00:55:36 base crash "WARNING in dbAdjTree" is to be ignored 2026/04/24 00:55:36 patched crashed: WARNING in dbAdjTree [need repro = false] 2026/04/24 00:55:46 runner 2 connected 2026/04/24 00:55:54 base crash: possible deadlock in ocfs2_init_acl 2026/04/24 00:56:35 runner 5 connected 2026/04/24 00:56:52 runner 0 connected 2026/04/24 00:57:53 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2026/04/24 00:58:58 runner 3 connected 2026/04/24 00:59:19 base crash: WARNING in dbAdjTree 2026/04/24 01:00:18 runner 2 connected 2026/04/24 01:00:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 689, "corpus": 7014, "corpus [files]": 296, "corpus [symbols]": 158, "cover overflows": 23160, "coverage": 90905, "distributor delayed": 12070, "distributor undelayed": 12070, "distributor violated": 14, "exec candidate": 10885, "exec collide": 4975, "exec fuzz": 9532, "exec gen": 495, "exec hints": 2408, "exec inject": 0, "exec minimize": 16712, "exec retries": 29, "exec seeds": 2191, "exec smash": 10078, "exec total [base]": 38297, "exec total [new]": 95966, "exec triage": 24172, "executor restarts [base]": 566, "executor restarts [new]": 1385, "fault jobs": 0, "fuzzer jobs": 585, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 140, "max signal": 96247, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 11646, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7968, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1472, "reproducing": 1, "rpc recv": 9700471996, "rpc sent": 5712903576, "signal": 87732, "smash jobs": 436, "triage jobs": 9, "vm output": 85795019, "vm restarts [base]": 39, "vm restarts [new]": 110 } 2026/04/24 01:00:38 crash "possible deadlock in ocfs2_reserve_suballoc_bits" is already known 2026/04/24 01:00:38 base crash "possible deadlock in ocfs2_reserve_suballoc_bits" is to be ignored 2026/04/24 01:00:38 patched crashed: possible deadlock in ocfs2_reserve_suballoc_bits [need repro = false] 2026/04/24 01:01:08 base crash: kernel BUG in hfs_write_inode 2026/04/24 01:01:36 runner 7 connected 2026/04/24 01:01:51 crash "unregister_netdevice: waiting for DEV to become free" is already known 2026/04/24 01:01:51 base crash "unregister_netdevice: waiting for DEV to become free" is to be ignored 2026/04/24 01:01:51 patched crashed: unregister_netdevice: waiting for DEV to become free [need repro = false] 2026/04/24 01:02:05 runner 1 connected 2026/04/24 01:02:48 runner 6 connected 2026/04/24 01:04:00 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 01:04:20 patched crashed: WARNING in path_openat [need repro = true] 2026/04/24 01:04:20 scheduled a reproduction of 'WARNING in path_openat' 2026/04/24 01:04:20 start reproducing 'WARNING in path_openat' 2026/04/24 01:05:04 runner 8 connected 2026/04/24 01:05:25 runner 3 connected 2026/04/24 01:05:28 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2026/04/24 01:05:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 707, "corpus": 7028, "corpus [files]": 297, "corpus [symbols]": 159, "cover overflows": 24141, "coverage": 90957, "distributor delayed": 12154, "distributor undelayed": 12154, "distributor violated": 14, "exec candidate": 10885, "exec collide": 5265, "exec fuzz": 10042, "exec gen": 524, "exec hints": 2547, "exec inject": 0, "exec minimize": 17289, "exec retries": 29, "exec seeds": 2255, "exec smash": 10707, "exec total [base]": 39395, "exec total [new]": 98345, "exec triage": 24308, "executor restarts [base]": 592, "executor restarts [new]": 1419, "fault jobs": 0, "fuzzer jobs": 573, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 131, "max signal": 96486, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 12054, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8017, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1600, "reproducing": 2, "rpc recv": 9982758284, "rpc sent": 5960056288, "signal": 87761, "smash jobs": 425, "triage jobs": 17, "vm output": 89874445, "vm restarts [base]": 40, "vm restarts [new]": 114 } 2026/04/24 01:06:27 runner 2 connected 2026/04/24 01:08:41 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:09:24 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 01:09:58 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2026/04/24 01:10:22 runner 6 connected 2026/04/24 01:10:26 patched crashed: possible deadlock in hfs_extend_file [need repro = false] 2026/04/24 01:10:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 724, "corpus": 7055, "corpus [files]": 300, "corpus [symbols]": 162, "cover overflows": 25107, "coverage": 91082, "distributor delayed": 12228, "distributor undelayed": 12227, "distributor violated": 14, "exec candidate": 10885, "exec collide": 5528, "exec fuzz": 10484, "exec gen": 551, "exec hints": 2675, "exec inject": 0, "exec minimize": 17895, "exec retries": 29, "exec seeds": 2302, "exec smash": 11262, "exec total [base]": 40371, "exec total [new]": 100533, "exec triage": 24431, "executor restarts [base]": 605, "executor restarts [new]": 1444, "fault jobs": 0, "fuzzer jobs": 591, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 4, "hints jobs": 147, "max signal": 96585, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 12454, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8063, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1988, "reproducing": 2, "rpc recv": 10172481764, "rpc sent": 6161725736, "signal": 87935, "smash jobs": 427, "triage jobs": 17, "vm output": 94098355, "vm restarts [base]": 41, "vm restarts [new]": 115 } 2026/04/24 01:10:46 base crash: possible deadlock in ocfs2_init_acl 2026/04/24 01:10:56 runner 0 connected 2026/04/24 01:11:31 runner 5 connected 2026/04/24 01:11:45 runner 1 connected 2026/04/24 01:12:11 crash "WARNING in udf_truncate_extents" is already known 2026/04/24 01:12:11 base crash "WARNING in udf_truncate_extents" is to be ignored 2026/04/24 01:12:11 patched crashed: WARNING in udf_truncate_extents [need repro = false] 2026/04/24 01:13:17 runner 7 connected 2026/04/24 01:15:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 744, "corpus": 7076, "corpus [files]": 302, "corpus [symbols]": 164, "cover overflows": 26033, "coverage": 91236, "distributor delayed": 12287, "distributor undelayed": 12287, "distributor violated": 14, "exec candidate": 10885, "exec collide": 5824, "exec fuzz": 10983, "exec gen": 569, "exec hints": 2825, "exec inject": 0, "exec minimize": 18329, "exec retries": 31, "exec seeds": 2362, "exec smash": 11866, "exec total [base]": 41490, "exec total [new]": 102702, "exec triage": 24537, "executor restarts [base]": 633, "executor restarts [new]": 1492, "fault jobs": 0, "fuzzer jobs": 579, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 153, "max signal": 96759, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 12696, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8102, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1848, "reproducing": 2, "rpc recv": 10468522816, "rpc sent": 6393337248, "signal": 88158, "smash jobs": 418, "triage jobs": 8, "vm output": 97605192, "vm restarts [base]": 43, "vm restarts [new]": 117 } 2026/04/24 01:16:47 patched crashed: WARNING in dbAdjTree [need repro = false] 2026/04/24 01:16:51 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:17:33 crash "INFO: task hung in user_get_super" is already known 2026/04/24 01:17:33 base crash "INFO: task hung in user_get_super" is to be ignored 2026/04/24 01:17:33 patched crashed: INFO: task hung in user_get_super [need repro = false] 2026/04/24 01:17:53 runner 3 connected 2026/04/24 01:18:01 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/24 01:18:28 crash "WARNING in udf_truncate_extents" is already known 2026/04/24 01:18:28 base crash "WARNING in udf_truncate_extents" is to be ignored 2026/04/24 01:18:28 patched crashed: WARNING in udf_truncate_extents [need repro = false] 2026/04/24 01:18:31 runner 4 connected 2026/04/24 01:18:59 runner 8 connected 2026/04/24 01:19:35 runner 3 connected 2026/04/24 01:20:13 repro finished 'KASAN: slab-use-after-free Read in txEnd', repro=false crepro=false desc='' hub=false from_dashboard=false 2026/04/24 01:20:13 failed repro for "KASAN: slab-use-after-free Read in txEnd", err=%!s() 2026/04/24 01:20:13 "KASAN: slab-use-after-free Read in txEnd": saved crash log into 1776993613.crash.log 2026/04/24 01:20:13 "KASAN: slab-use-after-free Read in txEnd": saved repro log into 1776993613.repro.log 2026/04/24 01:20:15 runner 0 connected 2026/04/24 01:20:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 766, "corpus": 7092, "corpus [files]": 305, "corpus [symbols]": 166, "cover overflows": 26942, "coverage": 91311, "distributor delayed": 12357, "distributor undelayed": 12357, "distributor violated": 14, "exec candidate": 10885, "exec collide": 6019, "exec fuzz": 11367, "exec gen": 587, "exec hints": 2929, "exec inject": 0, "exec minimize": 18923, "exec retries": 31, "exec seeds": 2417, "exec smash": 12307, "exec total [base]": 42689, "exec total [new]": 104610, "exec triage": 24649, "executor restarts [base]": 646, "executor restarts [new]": 1532, "fault jobs": 0, "fuzzer jobs": 580, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 158, "max signal": 96896, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13102, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8145, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1680, "reproducing": 1, "rpc recv": 10787998404, "rpc sent": 6610337824, "signal": 88197, "smash jobs": 404, "triage jobs": 18, "vm output": 104051824, "vm restarts [base]": 43, "vm restarts [new]": 122 } 2026/04/24 01:20:36 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:23:20 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2026/04/24 01:23:28 crash "possible deadlock in ocfs2_reserve_suballoc_bits" is already known 2026/04/24 01:23:28 base crash "possible deadlock in ocfs2_reserve_suballoc_bits" is to be ignored 2026/04/24 01:23:28 patched crashed: possible deadlock in ocfs2_reserve_suballoc_bits [need repro = false] 2026/04/24 01:23:55 crash "possible deadlock in ocfs2_reserve_suballoc_bits" is already known 2026/04/24 01:23:55 base crash "possible deadlock in ocfs2_reserve_suballoc_bits" is to be ignored 2026/04/24 01:23:55 patched crashed: possible deadlock in ocfs2_reserve_suballoc_bits [need repro = false] 2026/04/24 01:24:18 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2026/04/24 01:24:20 runner 2 connected 2026/04/24 01:24:27 runner 3 connected 2026/04/24 01:24:53 runner 5 connected 2026/04/24 01:25:20 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:25:24 runner 1 connected 2026/04/24 01:25:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 805, "corpus": 7118, "corpus [files]": 305, "corpus [symbols]": 166, "cover overflows": 28155, "coverage": 91390, "distributor delayed": 12441, "distributor undelayed": 12441, "distributor violated": 14, "exec candidate": 10885, "exec collide": 6315, "exec fuzz": 12002, "exec gen": 618, "exec hints": 3111, "exec inject": 0, "exec minimize": 19506, "exec retries": 31, "exec seeds": 2508, "exec smash": 12998, "exec total [base]": 43612, "exec total [new]": 107276, "exec triage": 24799, "executor restarts [base]": 668, "executor restarts [new]": 1573, "fault jobs": 0, "fuzzer jobs": 558, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 7, "hints jobs": 152, "max signal": 97203, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13457, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8193, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1817, "reproducing": 1, "rpc recv": 11024455976, "rpc sent": 6859498672, "signal": 88241, "smash jobs": 396, "triage jobs": 10, "vm output": 108771038, "vm restarts [base]": 45, "vm restarts [new]": 124 } 2026/04/24 01:26:56 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2026/04/24 01:27:54 runner 0 connected 2026/04/24 01:28:30 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2026/04/24 01:28:36 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:28:40 crash "INFO: task hung in user_get_super" is already known 2026/04/24 01:28:40 base crash "INFO: task hung in user_get_super" is to be ignored 2026/04/24 01:28:40 patched crashed: INFO: task hung in user_get_super [need repro = false] 2026/04/24 01:29:35 runner 3 connected 2026/04/24 01:29:38 runner 6 connected 2026/04/24 01:30:21 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:30:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 840, "corpus": 7133, "corpus [files]": 306, "corpus [symbols]": 166, "cover overflows": 29103, "coverage": 91482, "distributor delayed": 12509, "distributor undelayed": 12509, "distributor violated": 14, "exec candidate": 10885, "exec collide": 6571, "exec fuzz": 12591, "exec gen": 649, "exec hints": 3287, "exec inject": 0, "exec minimize": 19857, "exec retries": 31, "exec seeds": 2574, "exec smash": 13626, "exec total [base]": 44758, "exec total [new]": 109473, "exec triage": 24896, "executor restarts [base]": 686, "executor restarts [new]": 1632, "fault jobs": 0, "fuzzer jobs": 534, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 144, "max signal": 97323, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 13730, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8232, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1832, "reproducing": 1, "rpc recv": 11308444588, "rpc sent": 7089783808, "signal": 88318, "smash jobs": 378, "triage jobs": 12, "vm output": 112614628, "vm restarts [base]": 45, "vm restarts [new]": 127 } 2026/04/24 01:30:45 crash "WARNING in udf_truncate_extents" is already known 2026/04/24 01:30:45 base crash "WARNING in udf_truncate_extents" is to be ignored 2026/04/24 01:30:45 patched crashed: WARNING in udf_truncate_extents [need repro = false] 2026/04/24 01:31:28 base crash: WARNING in dbAdjTree 2026/04/24 01:31:42 runner 3 connected 2026/04/24 01:32:03 crash "INFO: task hung in user_get_super" is already known 2026/04/24 01:32:03 base crash "INFO: task hung in user_get_super" is to be ignored 2026/04/24 01:32:03 patched crashed: INFO: task hung in user_get_super [need repro = false] 2026/04/24 01:32:28 runner 0 connected 2026/04/24 01:33:08 runner 4 connected 2026/04/24 01:33:13 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:33:46 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/24 01:34:12 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:34:51 runner 5 connected 2026/04/24 01:35:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 877, "corpus": 7151, "corpus [files]": 307, "corpus [symbols]": 167, "cover overflows": 30170, "coverage": 91606, "distributor delayed": 12592, "distributor undelayed": 12592, "distributor violated": 14, "exec candidate": 10885, "exec collide": 6858, "exec fuzz": 13211, "exec gen": 684, "exec hints": 3487, "exec inject": 0, "exec minimize": 20302, "exec retries": 31, "exec seeds": 2633, "exec smash": 14313, "exec total [base]": 45821, "exec total [new]": 111937, "exec triage": 25025, "executor restarts [base]": 705, "executor restarts [new]": 1672, "fault jobs": 0, "fuzzer jobs": 520, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 134, "max signal": 97401, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 14035, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8282, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1581, "reproducing": 1, "rpc recv": 11586000764, "rpc sent": 7335870216, "signal": 88357, "smash jobs": 367, "triage jobs": 19, "vm output": 116910353, "vm restarts [base]": 46, "vm restarts [new]": 130 } 2026/04/24 01:36:03 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:36:10 patched crashed: KASAN: use-after-free Read in copy_folio_from_iter_atomic [need repro = false] 2026/04/24 01:37:17 runner 0 connected 2026/04/24 01:37:28 patched crashed: KASAN: slab-use-after-free Read in lbmIODone [need repro = false] 2026/04/24 01:38:34 runner 8 connected 2026/04/24 01:39:34 base crash: unregister_netdevice: waiting for DEV to become free 2026/04/24 01:40:28 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 01:40:29 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 901, "corpus": 7177, "corpus [files]": 307, "corpus [symbols]": 167, "cover overflows": 31385, "coverage": 91666, "distributor delayed": 12682, "distributor undelayed": 12682, "distributor violated": 14, "exec candidate": 10885, "exec collide": 7182, "exec fuzz": 13855, "exec gen": 704, "exec hints": 3687, "exec inject": 0, "exec minimize": 20861, "exec retries": 31, "exec seeds": 2699, "exec smash": 15027, "exec total [base]": 46716, "exec total [new]": 114620, "exec triage": 25185, "executor restarts [base]": 725, "executor restarts [new]": 1716, "fault jobs": 0, "fuzzer jobs": 508, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 5, "hints jobs": 139, "max signal": 97615, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 14490, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8337, "no exec duration": 31988000000, "no exec requests": 85, "pending": 0, "prog exec time": 1454, "reproducing": 1, "rpc recv": 11779160744, "rpc sent": 7574546576, "signal": 88406, "smash jobs": 358, "triage jobs": 11, "vm output": 121614709, "vm restarts [base]": 46, "vm restarts [new]": 132 } 2026/04/24 01:40:30 patched crashed: KASAN: use-after-free Read in copy_folio_from_iter_atomic [need repro = false] 2026/04/24 01:40:33 runner 1 connected 2026/04/24 01:41:01 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2026/04/24 01:41:10 base crash: general protection fault in lo_rw_aio 2026/04/24 01:41:13 reproducing crash 'WARNING in path_openat': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/namei.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2026/04/24 01:41:25 runner 7 connected 2026/04/24 01:41:29 runner 0 connected 2026/04/24 01:41:42 patched crashed: BUG: sleeping function called from invalid context in __zap_vma_range [need repro = true] 2026/04/24 01:41:42 scheduled a reproduction of 'BUG: sleeping function called from invalid context in __zap_vma_range' 2026/04/24 01:41:42 start reproducing 'BUG: sleeping function called from invalid context in __zap_vma_range' 2026/04/24 01:41:42 repro finished 'BUG: sleeping function called from invalid context in __zap_vma_range', repro=false crepro=false desc='' hub=false from_dashboard=false 2026/04/24 01:41:42 failed repro for "BUG: sleeping function called from invalid context in __zap_vma_range", err=log (7102 bytes) parse failed: no programs 2026/04/24 01:41:42 "BUG: sleeping function called from invalid context in __zap_vma_range": saved crash log into 1776994902.crash.log 2026/04/24 01:41:59 runner 5 connected 2026/04/24 01:42:09 runner 0 connected 2026/04/24 01:42:41 runner 0 connected 2026/04/24 01:44:35 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2026/04/24 01:45:24 status reporting terminated 2026/04/24 01:45:24 bug reporting terminated 2026/04/24 01:45:24 base: rpc server terminaled 2026/04/24 01:45:24 new: rpc server terminaled 2026/04/24 01:45:24 base: pool terminated 2026/04/24 01:45:24 base: kernel context loop terminated 2026/04/24 01:46:21 repro finished 'WARNING in path_openat', repro=false crepro=false desc='' hub=false from_dashboard=false 2026/04/24 01:46:21 repro loop terminated 2026/04/24 01:46:21 new: pool terminated 2026/04/24 01:46:21 new: kernel context loop terminated 2026/04/24 01:46:21 diff fuzzing terminated 2026/04/24 01:46:21 fuzzing is finished 2026/04/24 01:46:21 status at the end: Title On-Base On-Patched Status BUG: sleeping function called from invalid context in __zap_vma_range 1 crashes completed INFO: task hung in __iterate_supers 3 crashes 8 crashes ignored INFO: task hung in __writeback_inodes_sb_nr 1 crashes ignored INFO: task hung in lmLogClose 3 crashes ignored INFO: task hung in user_get_super 3 crashes ignored KASAN: slab-use-after-free Read in jfs_syncpt 1 crashes ignored KASAN: slab-use-after-free Read in lbmIODone 14 crashes 48 crashes ignored KASAN: slab-use-after-free Read in txEnd 2 crashes completed KASAN: use-after-free Read in copy_folio_from_iter_atomic 2 crashes 5 crashes ignored UBSAN: array-index-out-of-bounds in dtSplitPage 1 crashes ignored WARNING in bfs_get_block 2 crashes ignored WARNING in dbAdjTree 2 crashes 2 crashes completed WARNING in ifs_free 1 crashes ignored WARNING in path_openat 1 crashes verifying WARNING in udf_truncate_extents 6 crashes ignored WARNING: bad unlock balance in __zap_vma_range 1 crashes ignored general protection fault in lo_rw_aio 4 crashes completed kernel BUG in dbFindLeaf 1 crashes ignored kernel BUG in hfs_write_inode 5 crashes 12 crashes completed kernel BUG in jfs_evict_inode 1 crashes ignored kernel BUG in txUnlock 1 crashes 5 crashes completed possible deadlock in hfs_extend_file 1 crashes 1 crashes ignored possible deadlock in ocfs2_init_acl 6 crashes 10 crashes ignored possible deadlock in ocfs2_reserve_suballoc_bits 3 crashes ignored possible deadlock in ocfs2_try_remove_refcount_tree 6 crashes 7 crashes ignored unregister_netdevice: waiting for DEV to become free 1 crashes 1 crashes completed