2025/09/04 02:00:49 extracted 327268 text symbol hashes for base and 327266 for patched 2025/09/04 02:00:49 symbol "alloc_contig_dump_pages.descriptor" has different values in base vs patch 2025/09/04 02:00:49 binaries are different, continuing fuzzing 2025/09/04 02:00:49 adding modified_functions to focus areas: ["aoecmd_cfg" "aoecmd_exit" "aoecmd_work" "ata_rw_frameinit" "free_pagetable" "ktio" "newframe" "remove_common" "report_free_page_func" "rexmit_deferred" "update_balloon_size_func" "update_balloon_stats_func" "virtballoon_freeze" "virtballoon_probe" "virtballoon_remove" "virtballoon_restore" "virtio_balloon_oom_notify" "virtio_balloon_shrinker_scan"] 2025/09/04 02:00:49 adding directly modified files to focus areas: ["arch/arm64/mm/mmu.c" "arch/powerpc/mm/book3s64/radix_pgtable.c" "arch/riscv/mm/init.c" "arch/x86/mm/init_64.c" "arch/x86/platform/efi/memmap.c" "drivers/block/aoe/aoecmd.c" "drivers/virtio/virtio_balloon.c" "mm/page_alloc.c"] 2025/09/04 02:00:50 downloaded the corpus from https://storage.googleapis.com/syzkaller/corpus/ci2-upstream-fs-corpus.db 2025/09/04 02:01:39 runner 2 connected 2025/09/04 02:01:40 runner 5 connected 2025/09/04 02:01:40 runner 6 connected 2025/09/04 02:01:40 runner 1 connected 2025/09/04 02:01:40 runner 2 connected 2025/09/04 02:01:45 initializing coverage information... 2025/09/04 02:01:46 executor cover filter: 0 PCs 2025/09/04 02:01:47 runner 1 connected 2025/09/04 02:01:47 runner 4 connected 2025/09/04 02:01:47 runner 3 connected 2025/09/04 02:01:47 runner 0 connected 2025/09/04 02:01:47 runner 7 connected 2025/09/04 02:01:47 runner 8 connected 2025/09/04 02:01:47 runner 3 connected 2025/09/04 02:01:48 runner 0 connected 2025/09/04 02:01:48 runner 9 connected 2025/09/04 02:01:49 discovered 7699 source files, 338671 symbols 2025/09/04 02:01:49 coverage filter: aoecmd_cfg: [aoecmd_cfg aoecmd_cfg_rsp] 2025/09/04 02:01:49 coverage filter: aoecmd_exit: [aoecmd_exit] 2025/09/04 02:01:49 coverage filter: aoecmd_work: [aoecmd_work] 2025/09/04 02:01:49 coverage filter: ata_rw_frameinit: [ata_rw_frameinit] 2025/09/04 02:01:49 coverage filter: free_pagetable: [free_pagetable] 2025/09/04 02:01:49 coverage filter: ktio: [ktio] 2025/09/04 02:01:49 coverage filter: newframe: [newframe] 2025/09/04 02:01:49 coverage filter: remove_common: [remove_common] 2025/09/04 02:01:49 coverage filter: report_free_page_func: [report_free_page_func] 2025/09/04 02:01:49 coverage filter: rexmit_deferred: [rexmit_deferred] 2025/09/04 02:01:49 coverage filter: update_balloon_size_func: [update_balloon_size_func] 2025/09/04 02:01:49 coverage filter: update_balloon_stats_func: [update_balloon_stats_func] 2025/09/04 02:01:49 coverage filter: virtballoon_freeze: [virtballoon_freeze] 2025/09/04 02:01:49 coverage filter: virtballoon_probe: [virtballoon_probe] 2025/09/04 02:01:49 coverage filter: virtballoon_remove: [virtballoon_remove] 2025/09/04 02:01:49 coverage filter: virtballoon_restore: [virtballoon_restore] 2025/09/04 02:01:49 coverage filter: virtio_balloon_oom_notify: [virtio_balloon_oom_notify] 2025/09/04 02:01:49 coverage filter: virtio_balloon_shrinker_scan: [virtio_balloon_shrinker_scan] 2025/09/04 02:01:49 coverage filter: arch/arm64/mm/mmu.c: [] 2025/09/04 02:01:49 coverage filter: arch/powerpc/mm/book3s64/radix_pgtable.c: [] 2025/09/04 02:01:49 coverage filter: arch/riscv/mm/init.c: [] 2025/09/04 02:01:49 coverage filter: arch/x86/mm/init_64.c: [arch/x86/mm/init_64.c] 2025/09/04 02:01:49 coverage filter: arch/x86/platform/efi/memmap.c: [] 2025/09/04 02:01:49 coverage filter: drivers/block/aoe/aoecmd.c: [drivers/block/aoe/aoecmd.c] 2025/09/04 02:01:49 coverage filter: drivers/virtio/virtio_balloon.c: [drivers/virtio/virtio_balloon.c] 2025/09/04 02:01:49 coverage filter: mm/page_alloc.c: [] 2025/09/04 02:01:49 area "symbols": 567 PCs in the cover filter 2025/09/04 02:01:49 area "files": 1670 PCs in the cover filter 2025/09/04 02:01:49 area "": 0 PCs in the cover filter 2025/09/04 02:01:49 executor cover filter: 0 PCs 2025/09/04 02:01:52 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 571/8054 2025/09/04 02:01:52 base: machine check complete 2025/09/04 02:01:52 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 571/8054 2025/09/04 02:01:52 new: machine check complete 2025/09/04 02:01:52 new: adding 12449 seeds 2025/09/04 02:02:35 base crash "kernel BUG in jfs_evict_inode" is already known 2025/09/04 02:02:35 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:02:37 base crash "kernel BUG in jfs_evict_inode" is already known 2025/09/04 02:02:37 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:02:48 base crash "kernel BUG in jfs_evict_inode" is already known 2025/09/04 02:02:48 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:02:50 base crash "kernel BUG in jfs_evict_inode" is already known 2025/09/04 02:02:50 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:02:50 base crash "kernel BUG in jfs_evict_inode" is already known 2025/09/04 02:02:50 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:03:06 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:03:14 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:03:27 base crash "kernel BUG in txUnlock" is already known 2025/09/04 02:03:27 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/04 02:03:30 base crash "kernel BUG in txUnlock" is already known 2025/09/04 02:03:30 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/04 02:03:32 runner 2 connected 2025/09/04 02:03:33 base crash "kernel BUG in txUnlock" is already known 2025/09/04 02:03:33 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/04 02:03:34 runner 7 connected 2025/09/04 02:03:34 base crash "kernel BUG in txUnlock" is already known 2025/09/04 02:03:34 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/04 02:03:38 runner 1 connected 2025/09/04 02:03:39 runner 5 connected 2025/09/04 02:03:39 runner 9 connected 2025/09/04 02:03:57 runner 2 connected 2025/09/04 02:04:06 runner 0 connected 2025/09/04 02:04:06 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:04:15 runner 8 connected 2025/09/04 02:04:20 runner 4 connected 2025/09/04 02:04:21 runner 6 connected 2025/09/04 02:04:22 base crash: kernel BUG in txUnlock 2025/09/04 02:04:24 runner 3 connected 2025/09/04 02:04:57 runner 1 connected 2025/09/04 02:05:21 runner 3 connected 2025/09/04 02:05:22 base crash: kernel BUG in txUnlock 2025/09/04 02:05:51 STAT { "buffer too small": 0, "candidate triage jobs": 61, "candidates": 9627, "comps overflows": 0, "corpus": 2690, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 745, "coverage": 85172, "distributor delayed": 3284, "distributor undelayed": 3284, "distributor violated": 2, "exec candidate": 2822, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 4735, "exec total [new]": 12411, "exec triage": 8538, "executor restarts [base]": 86, "executor restarts [new]": 183, "fault jobs": 0, "fuzzer jobs": 61, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 8, "hints jobs": 0, "max signal": 86590, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 2822, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 282, "reproducing": 0, "rpc recv": 1511430736, "rpc sent": 264247624, "signal": 84505, "smash jobs": 0, "triage jobs": 0, "vm output": 6409434, "vm restarts [base]": 8, "vm restarts [new]": 19 } 2025/09/04 02:06:01 base crash "possible deadlock in run_unpack_ex" is already known 2025/09/04 02:06:01 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/04 02:06:01 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/04 02:06:01 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:06:02 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/04 02:06:02 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:06:02 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/04 02:06:02 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:06:14 base crash "possible deadlock in run_unpack_ex" is already known 2025/09/04 02:06:14 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/04 02:06:14 base crash "possible deadlock in ntfs_look_for_free_space" is already known 2025/09/04 02:06:14 patched crashed: possible deadlock in ntfs_look_for_free_space [need repro = false] 2025/09/04 02:06:20 runner 2 connected 2025/09/04 02:06:26 base crash "possible deadlock in run_unpack_ex" is already known 2025/09/04 02:06:26 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/04 02:06:26 base crash: kernel BUG in txUnlock 2025/09/04 02:06:52 runner 1 connected 2025/09/04 02:06:57 runner 2 connected 2025/09/04 02:06:57 runner 8 connected 2025/09/04 02:06:59 runner 9 connected 2025/09/04 02:07:03 runner 7 connected 2025/09/04 02:07:06 runner 6 connected 2025/09/04 02:07:14 runner 3 connected 2025/09/04 02:07:15 runner 5 connected 2025/09/04 02:07:26 base crash "INFO: task hung in __iterate_supers" is already known 2025/09/04 02:07:26 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2025/09/04 02:08:02 base crash "possible deadlock in hfs_extend_file" is already known 2025/09/04 02:08:02 patched crashed: possible deadlock in hfs_extend_file [need repro = false] 2025/09/04 02:08:23 runner 0 connected 2025/09/04 02:08:26 base crash "WARNING in dbAdjTree" is already known 2025/09/04 02:08:26 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:08:51 base crash: possible deadlock in hfs_extend_file 2025/09/04 02:08:56 base crash: kernel BUG in txUnlock 2025/09/04 02:08:59 runner 8 connected 2025/09/04 02:09:14 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/04 02:09:14 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:09:23 runner 3 connected 2025/09/04 02:09:34 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:09:37 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/04 02:09:37 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:09:38 base crash "possible deadlock in run_unpack_ex" is already known 2025/09/04 02:09:38 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/04 02:09:39 base crash: kernel BUG in hfs_write_inode 2025/09/04 02:09:48 runner 2 connected 2025/09/04 02:09:52 runner 1 connected 2025/09/04 02:10:11 runner 0 connected 2025/09/04 02:10:22 base crash "INFO: task hung in evict" is already known 2025/09/04 02:10:22 patched crashed: INFO: task hung in evict [need repro = false] 2025/09/04 02:10:23 runner 3 connected 2025/09/04 02:10:32 base crash "INFO: task hung in evict" is already known 2025/09/04 02:10:32 patched crashed: INFO: task hung in evict [need repro = false] 2025/09/04 02:10:34 runner 9 connected 2025/09/04 02:10:35 runner 1 connected 2025/09/04 02:10:37 runner 0 connected 2025/09/04 02:10:39 base crash: kernel BUG in hfs_write_inode 2025/09/04 02:10:51 STAT { "buffer too small": 0, "candidate triage jobs": 46, "candidates": 6960, "comps overflows": 0, "corpus": 5280, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 1553, "coverage": 99435, "distributor delayed": 6735, "distributor undelayed": 6735, "distributor violated": 83, "exec candidate": 5489, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 9973, "exec total [new]": 25090, "exec triage": 16615, "executor restarts [base]": 150, "executor restarts [new]": 346, "fault jobs": 0, "fuzzer jobs": 46, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 8, "hints jobs": 0, "max signal": 100153, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 5489, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 443, "reproducing": 0, "rpc recv": 2765495892, "rpc sent": 565474248, "signal": 98506, "smash jobs": 0, "triage jobs": 0, "vm output": 14077854, "vm restarts [base]": 14, "vm restarts [new]": 32 } 2025/09/04 02:11:11 runner 6 connected 2025/09/04 02:11:28 runner 5 connected 2025/09/04 02:11:36 runner 1 connected 2025/09/04 02:11:46 base crash: possible deadlock in run_unpack_ex 2025/09/04 02:11:55 base crash: INFO: trying to register non-static key in ocfs2_dlm_shutdown 2025/09/04 02:12:05 base crash: possible deadlock in run_unpack_ex 2025/09/04 02:12:27 base crash "WARNING in dbAdjTree" is already known 2025/09/04 02:12:27 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:12:43 runner 3 connected 2025/09/04 02:12:53 runner 0 connected 2025/09/04 02:12:55 runner 2 connected 2025/09/04 02:13:24 runner 8 connected 2025/09/04 02:14:13 base crash "WARNING in dbAdjTree" is already known 2025/09/04 02:14:13 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:14:16 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:14:19 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:14:20 base crash: kernel BUG in hfs_write_inode 2025/09/04 02:14:20 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/04 02:14:30 base crash: kernel BUG in hfs_write_inode 2025/09/04 02:14:57 base crash "WARNING in dbAdjTree" is already known 2025/09/04 02:14:57 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:15:08 base crash: possible deadlock in run_unpack_ex 2025/09/04 02:15:09 runner 4 connected 2025/09/04 02:15:09 runner 3 connected 2025/09/04 02:15:09 runner 0 connected 2025/09/04 02:15:13 runner 8 connected 2025/09/04 02:15:15 runner 2 connected 2025/09/04 02:15:19 runner 2 connected 2025/09/04 02:15:46 runner 7 connected 2025/09/04 02:15:51 STAT { "buffer too small": 0, "candidate triage jobs": 5, "candidates": 4691, "comps overflows": 0, "corpus": 7513, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 2587, "coverage": 105999, "distributor delayed": 8620, "distributor undelayed": 8620, "distributor violated": 83, "exec candidate": 7758, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 15099, "exec total [new]": 43713, "exec triage": 23535, "executor restarts [base]": 206, "executor restarts [new]": 472, "fault jobs": 0, "fuzzer jobs": 5, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 0, "max signal": 106682, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7751, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 228, "reproducing": 0, "rpc recv": 3741057240, "rpc sent": 959471008, "signal": 105257, "smash jobs": 0, "triage jobs": 0, "vm output": 23961113, "vm restarts [base]": 20, "vm restarts [new]": 40 } 2025/09/04 02:15:51 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:16:00 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:16:01 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/04 02:16:02 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:16:04 runner 0 connected 2025/09/04 02:16:49 runner 8 connected 2025/09/04 02:16:57 runner 6 connected 2025/09/04 02:16:57 runner 9 connected 2025/09/04 02:17:00 runner 4 connected 2025/09/04 02:17:25 base crash "WARNING in dbAdjTree" is already known 2025/09/04 02:17:25 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:17:37 base crash "WARNING in dbAdjTree" is already known 2025/09/04 02:17:37 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:17:40 base crash "WARNING in dbAdjTree" is already known 2025/09/04 02:17:40 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:17:51 triaged 100.0% of the corpus 2025/09/04 02:17:51 triaged 100.0% of the corpus 2025/09/04 02:17:51 starting bug reproductions 2025/09/04 02:17:51 starting bug reproductions (max 10 VMs, 7 repros) 2025/09/04 02:18:01 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/04 02:18:09 base crash "kernel BUG in ocfs2_write_cluster_by_desc" is already known 2025/09/04 02:18:09 patched crashed: kernel BUG in ocfs2_write_cluster_by_desc [need repro = false] 2025/09/04 02:18:22 runner 3 connected 2025/09/04 02:18:23 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:18:28 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:18:30 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:18:30 runner 8 connected 2025/09/04 02:18:32 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:18:33 runner 6 connected 2025/09/04 02:18:45 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:18:45 base crash "KASAN: slab-use-after-free Read in jfs_lazycommit" is already known 2025/09/04 02:18:45 patched crashed: KASAN: slab-use-after-free Read in jfs_lazycommit [need repro = false] 2025/09/04 02:18:50 runner 4 connected 2025/09/04 02:18:50 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:18:56 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:18:58 runner 9 connected 2025/09/04 02:19:05 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:19:12 runner 2 connected 2025/09/04 02:19:14 base crash: WARNING in dbAdjTree 2025/09/04 02:19:16 runner 0 connected 2025/09/04 02:19:18 runner 7 connected 2025/09/04 02:19:21 runner 1 connected 2025/09/04 02:19:21 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:19:34 runner 2 connected 2025/09/04 02:19:34 runner 3 connected 2025/09/04 02:19:40 runner 1 connected 2025/09/04 02:19:44 runner 6 connected 2025/09/04 02:19:54 runner 8 connected 2025/09/04 02:19:55 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:19:59 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:20:03 runner 0 connected 2025/09/04 02:20:10 runner 9 connected 2025/09/04 02:20:10 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/09/04 02:20:10 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/09/04 02:20:14 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:20:23 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:20:28 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:20:46 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:20:51 runner 4 connected 2025/09/04 02:20:51 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 30, "corpus": 7629, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 4376, "coverage": 106397, "distributor delayed": 8818, "distributor undelayed": 8818, "distributor violated": 83, "exec candidate": 12449, "exec collide": 238, "exec fuzz": 491, "exec gen": 28, "exec hints": 76, "exec inject": 0, "exec minimize": 1435, "exec retries": 4, "exec seeds": 147, "exec smash": 255, "exec total [base]": 21360, "exec total [new]": 53944, "exec triage": 24011, "executor restarts [base]": 261, "executor restarts [new]": 604, "fault jobs": 0, "fuzzer jobs": 181, "fuzzing VMs [base]": 1, "fuzzing VMs [new]": 5, "hints jobs": 72, "max signal": 107695, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1108, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7926, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 759, "reproducing": 0, "rpc recv": 4745212968, "rpc sent": 1308826744, "signal": 105569, "smash jobs": 85, "triage jobs": 24, "vm output": 30624458, "vm restarts [base]": 24, "vm restarts [new]": 58 } 2025/09/04 02:20:51 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2025/09/04 02:20:51 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:20:56 runner 2 connected 2025/09/04 02:20:58 runner 5 connected 2025/09/04 02:21:02 runner 6 connected 2025/09/04 02:21:03 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:21:13 runner 2 connected 2025/09/04 02:21:14 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2025/09/04 02:21:14 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:21:17 runner 0 connected 2025/09/04 02:21:44 runner 1 connected 2025/09/04 02:21:47 runner 8 connected 2025/09/04 02:21:59 runner 3 connected 2025/09/04 02:22:03 runner 3 connected 2025/09/04 02:23:01 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:23:04 base crash: possible deadlock in run_unpack_ex 2025/09/04 02:23:07 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:23:09 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:23:39 base crash "INFO: task hung in __closure_sync" is already known 2025/09/04 02:23:39 patched crashed: INFO: task hung in __closure_sync [need repro = false] 2025/09/04 02:23:43 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:23:57 runner 0 connected 2025/09/04 02:24:00 runner 2 connected 2025/09/04 02:24:03 runner 0 connected 2025/09/04 02:24:06 runner 4 connected 2025/09/04 02:24:12 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:24:13 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:24:28 runner 1 connected 2025/09/04 02:24:33 runner 3 connected 2025/09/04 02:24:57 base crash: WARNING in dbAdjTree 2025/09/04 02:25:01 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:25:10 runner 1 connected 2025/09/04 02:25:10 runner 8 connected 2025/09/04 02:25:22 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:25:51 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 171, "corpus": 7796, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 8086, "coverage": 107151, "distributor delayed": 9053, "distributor undelayed": 9053, "distributor violated": 83, "exec candidate": 12449, "exec collide": 811, "exec fuzz": 1575, "exec gen": 99, "exec hints": 381, "exec inject": 0, "exec minimize": 4493, "exec retries": 4, "exec seeds": 580, "exec smash": 1250, "exec total [base]": 24192, "exec total [new]": 61142, "exec triage": 24676, "executor restarts [base]": 315, "executor restarts [new]": 763, "fault jobs": 0, "fuzzer jobs": 417, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 151, "max signal": 108963, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 3448, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8211, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 1367, "reproducing": 0, "rpc recv": 5783572404, "rpc sent": 1789474568, "signal": 106199, "smash jobs": 231, "triage jobs": 35, "vm output": 39030665, "vm restarts [base]": 31, "vm restarts [new]": 68 } 2025/09/04 02:25:54 runner 3 connected 2025/09/04 02:25:58 runner 0 connected 2025/09/04 02:26:01 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:26:12 runner 9 connected 2025/09/04 02:26:46 patched crashed: possible deadlock in hfs_extend_file [need repro = false] 2025/09/04 02:26:48 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:26:48 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:26:51 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:26:53 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:26:56 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:26:57 runner 2 connected 2025/09/04 02:27:38 runner 5 connected 2025/09/04 02:27:42 base crash "INFO: task hung in __iterate_supers" is already known 2025/09/04 02:27:42 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2025/09/04 02:27:42 runner 6 connected 2025/09/04 02:27:45 runner 3 connected 2025/09/04 02:27:47 runner 1 connected 2025/09/04 02:27:50 runner 0 connected 2025/09/04 02:27:51 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:27:52 runner 9 connected 2025/09/04 02:28:04 base crash "possible deadlock in ocfs2_setattr" is already known 2025/09/04 02:28:04 patched crashed: possible deadlock in ocfs2_setattr [need repro = false] 2025/09/04 02:28:10 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:28:12 base crash "kernel BUG in may_open" is already known 2025/09/04 02:28:12 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/04 02:28:34 base crash "KASAN: slab-use-after-free Read in jfs_lazycommit" is already known 2025/09/04 02:28:34 patched crashed: KASAN: slab-use-after-free Read in jfs_lazycommit [need repro = false] 2025/09/04 02:28:36 base crash "KASAN: slab-use-after-free Read in jfs_lazycommit" is already known 2025/09/04 02:28:36 patched crashed: KASAN: slab-use-after-free Read in jfs_lazycommit [need repro = false] 2025/09/04 02:28:38 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:28:38 runner 7 connected 2025/09/04 02:28:47 runner 2 connected 2025/09/04 02:28:54 runner 6 connected 2025/09/04 02:28:54 base crash "KASAN: slab-use-after-free Read in jfs_lazycommit" is already known 2025/09/04 02:28:54 patched crashed: KASAN: slab-use-after-free Read in jfs_lazycommit [need repro = false] 2025/09/04 02:28:59 runner 3 connected 2025/09/04 02:29:01 runner 1 connected 2025/09/04 02:29:23 runner 0 connected 2025/09/04 02:29:25 runner 5 connected 2025/09/04 02:29:34 runner 8 connected 2025/09/04 02:29:37 base crash "kernel BUG in may_open" is already known 2025/09/04 02:29:37 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/04 02:29:42 base crash: KASAN: slab-use-after-free Read in jfs_lazycommit 2025/09/04 02:29:43 runner 9 connected 2025/09/04 02:30:26 base crash: KASAN: slab-use-after-free Read in jfs_lazycommit 2025/09/04 02:30:34 runner 7 connected 2025/09/04 02:30:39 runner 3 connected 2025/09/04 02:30:51 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 291, "corpus": 7894, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 11047, "coverage": 108302, "distributor delayed": 9207, "distributor undelayed": 9207, "distributor violated": 83, "exec candidate": 12449, "exec collide": 1292, "exec fuzz": 2389, "exec gen": 137, "exec hints": 614, "exec inject": 0, "exec minimize": 6661, "exec retries": 4, "exec seeds": 876, "exec smash": 2043, "exec total [base]": 26965, "exec total [new]": 66379, "exec triage": 25066, "executor restarts [base]": 380, "executor restarts [new]": 925, "fault jobs": 0, "fuzzer jobs": 536, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 9, "hints jobs": 202, "max signal": 110368, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 5125, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8374, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 881, "reproducing": 0, "rpc recv": 6876624184, "rpc sent": 2186067160, "signal": 106636, "smash jobs": 305, "triage jobs": 29, "vm output": 46433572, "vm restarts [base]": 35, "vm restarts [new]": 85 } 2025/09/04 02:31:01 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:31:22 runner 0 connected 2025/09/04 02:31:23 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:31:26 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:31:34 base crash: kernel BUG in jfs_evict_inode 2025/09/04 02:31:50 runner 3 connected 2025/09/04 02:32:19 runner 6 connected 2025/09/04 02:32:20 base crash "KASAN: slab-out-of-bounds Write in bch2_dirent_init_name" is already known 2025/09/04 02:32:20 patched crashed: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name [need repro = false] 2025/09/04 02:32:23 runner 8 connected 2025/09/04 02:32:31 runner 1 connected 2025/09/04 02:32:37 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:32:58 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:32:58 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:32:59 base crash "INFO: task hung in __iterate_supers" is already known 2025/09/04 02:32:59 patched crashed: INFO: task hung in __iterate_supers [need repro = false] 2025/09/04 02:33:08 base crash "kernel BUG in may_open" is already known 2025/09/04 02:33:08 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/04 02:33:12 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:33:16 runner 2 connected 2025/09/04 02:33:25 runner 0 connected 2025/09/04 02:33:26 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:33:46 runner 5 connected 2025/09/04 02:33:49 base crash "kernel BUG in may_open" is already known 2025/09/04 02:33:49 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/04 02:33:55 runner 1 connected 2025/09/04 02:33:56 runner 3 connected 2025/09/04 02:33:57 runner 3 connected 2025/09/04 02:34:02 runner 7 connected 2025/09/04 02:34:15 runner 8 connected 2025/09/04 02:34:40 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:34:44 base crash "possible deadlock in ocfs2_del_inode_from_orphan" is already known 2025/09/04 02:34:44 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/09/04 02:34:44 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:34:45 runner 2 connected 2025/09/04 02:34:45 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:35:24 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:35:31 base crash "KASAN: slab-out-of-bounds Write in bch2_dirent_init_name" is already known 2025/09/04 02:35:31 patched crashed: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name [need repro = false] 2025/09/04 02:35:37 runner 7 connected 2025/09/04 02:35:41 runner 0 connected 2025/09/04 02:35:42 runner 4 connected 2025/09/04 02:35:42 runner 0 connected 2025/09/04 02:35:48 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/04 02:35:51 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:35:51 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 415, "corpus": 7983, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 14000, "coverage": 108741, "distributor delayed": 9395, "distributor undelayed": 9394, "distributor violated": 83, "exec candidate": 12449, "exec collide": 1813, "exec fuzz": 3324, "exec gen": 174, "exec hints": 937, "exec inject": 0, "exec minimize": 8513, "exec retries": 5, "exec seeds": 1125, "exec smash": 2968, "exec total [base]": 29463, "exec total [new]": 71607, "exec triage": 25449, "executor restarts [base]": 450, "executor restarts [new]": 1078, "fault jobs": 0, "fuzzer jobs": 602, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 214, "max signal": 110985, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 6431, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8523, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 760, "reproducing": 0, "rpc recv": 7864609428, "rpc sent": 2575645040, "signal": 107010, "smash jobs": 368, "triage jobs": 20, "vm output": 54130802, "vm restarts [base]": 39, "vm restarts [new]": 99 } 2025/09/04 02:35:55 base crash: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name 2025/09/04 02:36:21 runner 3 connected 2025/09/04 02:36:21 runner 5 connected 2025/09/04 02:36:25 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:36:29 base crash: possible deadlock in ocfs2_del_inode_from_orphan 2025/09/04 02:36:32 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:36:40 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:36:44 runner 1 connected 2025/09/04 02:36:44 runner 1 connected 2025/09/04 02:36:47 runner 6 connected 2025/09/04 02:36:53 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:37:04 base crash "possible deadlock in ocfs2_init_acl" is already known 2025/09/04 02:37:04 patched crashed: possible deadlock in ocfs2_init_acl [need repro = false] 2025/09/04 02:37:06 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:37:10 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:37:15 runner 9 connected 2025/09/04 02:37:18 runner 3 connected 2025/09/04 02:37:21 runner 8 connected 2025/09/04 02:37:23 base crash "possible deadlock in ocfs2_lock_global_qf" is already known 2025/09/04 02:37:23 patched crashed: possible deadlock in ocfs2_lock_global_qf [need repro = false] 2025/09/04 02:37:32 runner 4 connected 2025/09/04 02:37:42 runner 5 connected 2025/09/04 02:37:43 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:37:52 runner 3 connected 2025/09/04 02:37:56 runner 7 connected 2025/09/04 02:38:05 patched crashed: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name [need repro = false] 2025/09/04 02:38:07 runner 1 connected 2025/09/04 02:38:12 base crash "kernel BUG in may_open" is already known 2025/09/04 02:38:12 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/04 02:38:13 runner 6 connected 2025/09/04 02:38:28 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:38:34 runner 0 connected 2025/09/04 02:38:34 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:38:42 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:39:02 runner 0 connected 2025/09/04 02:39:02 runner 9 connected 2025/09/04 02:39:02 base crash: kernel BUG in may_open 2025/09/04 02:39:17 runner 1 connected 2025/09/04 02:39:23 runner 2 connected 2025/09/04 02:39:30 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:39:39 runner 4 connected 2025/09/04 02:39:43 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:39:51 runner 3 connected 2025/09/04 02:40:08 base crash: possible deadlock in ocfs2_init_acl 2025/09/04 02:40:09 patched crashed: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name [need repro = false] 2025/09/04 02:40:27 runner 8 connected 2025/09/04 02:40:33 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:40:40 runner 9 connected 2025/09/04 02:40:51 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 550, "corpus": 8065, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 17551, "coverage": 109005, "distributor delayed": 9538, "distributor undelayed": 9538, "distributor violated": 83, "exec candidate": 12449, "exec collide": 2361, "exec fuzz": 4259, "exec gen": 229, "exec hints": 1268, "exec inject": 0, "exec minimize": 10340, "exec retries": 5, "exec seeds": 1362, "exec smash": 3938, "exec total [base]": 31477, "exec total [new]": 76893, "exec triage": 25808, "executor restarts [base]": 512, "executor restarts [new]": 1232, "fault jobs": 0, "fuzzer jobs": 675, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 9, "hints jobs": 229, "max signal": 111868, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 7896, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8675, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 1010, "reproducing": 0, "rpc recv": 8942488860, "rpc sent": 2968038056, "signal": 107207, "smash jobs": 426, "triage jobs": 20, "vm output": 60818468, "vm restarts [base]": 45, "vm restarts [new]": 116 } 2025/09/04 02:41:03 base crash: KASAN: slab-use-after-free Read in jfs_lazycommit 2025/09/04 02:41:04 runner 2 connected 2025/09/04 02:41:05 runner 0 connected 2025/09/04 02:41:07 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:41:22 runner 1 connected 2025/09/04 02:41:23 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:41:44 base crash "INFO: task hung in __closure_sync" is already known 2025/09/04 02:41:44 patched crashed: INFO: task hung in __closure_sync [need repro = false] 2025/09/04 02:41:46 base crash "INFO: task hung in bch2_journal_reclaim_thread" is already known 2025/09/04 02:41:46 patched crashed: INFO: task hung in bch2_journal_reclaim_thread [need repro = false] 2025/09/04 02:42:01 runner 0 connected 2025/09/04 02:42:01 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/09/04 02:42:02 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:42:03 runner 5 connected 2025/09/04 02:42:12 runner 7 connected 2025/09/04 02:42:36 runner 2 connected 2025/09/04 02:42:42 runner 1 connected 2025/09/04 02:42:48 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:42:53 runner 9 connected 2025/09/04 02:42:59 runner 1 connected 2025/09/04 02:43:04 patched crashed: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name [need repro = false] 2025/09/04 02:43:11 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:43:37 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:43:38 runner 0 connected 2025/09/04 02:43:56 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:44:02 runner 3 connected 2025/09/04 02:44:07 runner 3 connected 2025/09/04 02:44:24 base crash "INFO: task hung in __closure_sync" is already known 2025/09/04 02:44:24 patched crashed: INFO: task hung in __closure_sync [need repro = false] 2025/09/04 02:44:34 runner 9 connected 2025/09/04 02:44:53 runner 2 connected 2025/09/04 02:45:02 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:45:15 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:45:20 runner 8 connected 2025/09/04 02:45:29 base crash "INFO: task hung in __closure_sync" is already known 2025/09/04 02:45:29 patched crashed: INFO: task hung in __closure_sync [need repro = false] 2025/09/04 02:45:51 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 665, "corpus": 8125, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 21289, "coverage": 109387, "distributor delayed": 9671, "distributor undelayed": 9671, "distributor violated": 83, "exec candidate": 12449, "exec collide": 3061, "exec fuzz": 5508, "exec gen": 312, "exec hints": 1687, "exec inject": 0, "exec minimize": 11793, "exec retries": 5, "exec seeds": 1624, "exec smash": 5290, "exec total [base]": 33505, "exec total [new]": 82786, "exec triage": 26171, "executor restarts [base]": 584, "executor restarts [new]": 1472, "fault jobs": 0, "fuzzer jobs": 629, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 6, "hints jobs": 180, "max signal": 112424, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 9153, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8826, "no exec duration": 15153000000, "no exec requests": 138, "pending": 0, "prog exec time": 796, "reproducing": 0, "rpc recv": 9779813212, "rpc sent": 3402891464, "signal": 107494, "smash jobs": 428, "triage jobs": 21, "vm output": 68148602, "vm restarts [base]": 52, "vm restarts [new]": 125 } 2025/09/04 02:45:54 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:45:59 runner 4 connected 2025/09/04 02:46:00 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:46:12 runner 1 connected 2025/09/04 02:46:25 runner 7 connected 2025/09/04 02:46:33 base crash "INFO: task hung in bch2_journal_reclaim_thread" is already known 2025/09/04 02:46:33 patched crashed: INFO: task hung in bch2_journal_reclaim_thread [need repro = false] 2025/09/04 02:46:34 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/04 02:46:43 runner 6 connected 2025/09/04 02:46:46 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/04 02:46:49 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/04 02:46:56 runner 8 connected 2025/09/04 02:47:00 base crash: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name 2025/09/04 02:47:22 runner 2 connected 2025/09/04 02:47:31 runner 5 connected 2025/09/04 02:47:38 runner 4 connected 2025/09/04 02:47:43 runner 1 connected 2025/09/04 02:47:46 base crash: possible deadlock in ocfs2_del_inode_from_orphan 2025/09/04 02:47:49 runner 2 connected 2025/09/04 02:47:51 fuzzer has not reached the modified code in 30m0s, aborting 2025/09/04 02:47:51 failed to recv *flatrpc.InfoRequestRawT: read tcp 127.0.0.1:42257->127.0.0.1:43338: use of closed network connection 2025/09/04 02:47:51 syz-diff (new): kernel context loop terminated 2025/09/04 02:48:27 syz-diff (base): kernel context loop terminated 2025/09/04 02:48:27 diff fuzzing terminated 2025/09/04 02:48:27 status reporting terminated 2025/09/04 02:48:27 bug reporting terminated 2025/09/04 02:48:27 fuzzing is finished 2025/09/04 02:48:27 status at the end: Title On-Base On-Patched INFO: task hung in __closure_sync 4 crashes INFO: task hung in __iterate_supers 3 crashes INFO: task hung in bch2_journal_reclaim_thread 2 crashes INFO: task hung in evict 2 crashes INFO: trying to register non-static key in ocfs2_dlm_shutdown 1 crashes KASAN: slab-out-of-bounds Write in bch2_dirent_init_name 2 crashes 5 crashes KASAN: slab-use-after-free Read in jfs_lazycommit 3 crashes 4 crashes WARNING in dbAdjTree 2 crashes 9 crashes kernel BUG in hfs_write_inode 4 crashes 11 crashes kernel BUG in jfs_evict_inode 13 crashes 25 crashes kernel BUG in may_open 1 crashes 5 crashes kernel BUG in ocfs2_write_cluster_by_desc 1 crashes kernel BUG in txUnlock 4 crashes 4 crashes possible deadlock in hfs_extend_file 1 crashes 2 crashes possible deadlock in ntfs_look_for_free_space 1 crashes possible deadlock in ocfs2_del_inode_from_orphan 2 crashes 3 crashes possible deadlock in ocfs2_init_acl 1 crashes 1 crashes possible deadlock in ocfs2_lock_global_qf 1 crashes possible deadlock in ocfs2_setattr 1 crashes possible deadlock in ocfs2_try_remove_refcount_tree 14 crashes 32 crashes possible deadlock in run_unpack_ex 4 crashes 6 crashes