2025/09/10 12:11:39 extracted 327329 text symbol hashes for base and 327329 for patched 2025/09/10 12:11:39 symbol "raid5_run.__UNIQUE_ID_ddebug1739" has different values in base vs patch 2025/09/10 12:11:39 binaries are different, continuing fuzzing 2025/09/10 12:11:39 adding modified_functions to focus areas: ["check_reshape" "free_conf" "grow_stripes" "handle_active_stripes" "handle_stripe" "raid0_make_request" "raid0_run" "raid10_make_request" "raid10_run" "raid10_sync_request" "raid1_run" "raid456_cpu_dead" "raid456_cpu_up_prepare" "raid4_takeover" "raid5_cache_scan" "raid5_change_consistency_policy" "raid5_free" "raid5_remove_disk" "raid5_run" "raid5_set_limits" "raid5_start_reshape" "raid5_store_group_thread_cnt" "raid5_takeover" "raid5d" "raid6_check_reshape" "release_stripe_list" "resize_stripes" "setup_conf"] 2025/09/10 12:11:39 adding directly modified files to focus areas: ["drivers/block/drbd/drbd_nl.c" "drivers/md/md-linear.c" "drivers/md/raid0.c" "drivers/md/raid1.c" "drivers/md/raid10.c" "drivers/md/raid5.c"] 2025/09/10 12:11:41 downloaded the corpus from https://storage.googleapis.com/syzkaller/corpus/ci2-upstream-fs-corpus.db 2025/09/10 12:12:30 runner 0 connected 2025/09/10 12:12:30 runner 9 connected 2025/09/10 12:12:30 runner 4 connected 2025/09/10 12:12:31 runner 2 connected 2025/09/10 12:12:31 runner 5 connected 2025/09/10 12:12:31 runner 3 connected 2025/09/10 12:12:31 runner 1 connected 2025/09/10 12:12:32 runner 1 connected 2025/09/10 12:12:32 runner 3 connected 2025/09/10 12:12:36 initializing coverage information... 2025/09/10 12:12:36 executor cover filter: 0 PCs 2025/09/10 12:12:38 runner 2 connected 2025/09/10 12:12:38 runner 7 connected 2025/09/10 12:12:38 runner 8 connected 2025/09/10 12:12:39 runner 0 connected 2025/09/10 12:12:39 runner 6 connected 2025/09/10 12:12:39 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 571/8054 2025/09/10 12:12:39 base: machine check complete 2025/09/10 12:12:40 discovered 7699 source files, 338732 symbols 2025/09/10 12:12:41 coverage filter: check_reshape: [check_reshape raid10_check_reshape raid5_check_reshape raid6_check_reshape rs_check_reshape] 2025/09/10 12:12:41 coverage filter: free_conf: [free_conf raid10_free_conf] 2025/09/10 12:12:41 coverage filter: grow_stripes: [grow_stripes] 2025/09/10 12:12:41 coverage filter: handle_active_stripes: [handle_active_stripes] 2025/09/10 12:12:41 coverage filter: handle_stripe: [handle_stripe handle_stripe_clean_event handle_stripe_dirtying handle_stripe_expansion handle_stripe_fill] 2025/09/10 12:12:41 coverage filter: raid0_make_request: [raid0_make_request] 2025/09/10 12:12:41 coverage filter: raid0_run: [raid0_run] 2025/09/10 12:12:41 coverage filter: raid10_make_request: [raid10_make_request] 2025/09/10 12:12:41 coverage filter: raid10_run: [raid10_run] 2025/09/10 12:12:41 coverage filter: raid10_sync_request: [raid10_sync_request] 2025/09/10 12:12:41 coverage filter: raid1_run: [raid1_run] 2025/09/10 12:12:41 coverage filter: raid456_cpu_dead: [raid456_cpu_dead] 2025/09/10 12:12:41 coverage filter: raid456_cpu_up_prepare: [raid456_cpu_up_prepare] 2025/09/10 12:12:41 coverage filter: raid4_takeover: [raid4_takeover] 2025/09/10 12:12:41 coverage filter: raid5_cache_scan: [raid5_cache_scan] 2025/09/10 12:12:41 coverage filter: raid5_change_consistency_policy: [raid5_change_consistency_policy] 2025/09/10 12:12:41 coverage filter: raid5_free: [raid5_free] 2025/09/10 12:12:41 coverage filter: raid5_remove_disk: [raid5_remove_disk] 2025/09/10 12:12:41 coverage filter: raid5_run: [raid5_run] 2025/09/10 12:12:41 coverage filter: raid5_set_limits: [raid5_set_limits] 2025/09/10 12:12:41 coverage filter: raid5_start_reshape: [raid5_start_reshape] 2025/09/10 12:12:41 coverage filter: raid5_store_group_thread_cnt: [raid5_store_group_thread_cnt] 2025/09/10 12:12:41 coverage filter: raid5_takeover: [raid5_takeover] 2025/09/10 12:12:41 coverage filter: raid5d: [raid5d] 2025/09/10 12:12:41 coverage filter: raid6_check_reshape: [] 2025/09/10 12:12:41 coverage filter: release_stripe_list: [release_stripe_list] 2025/09/10 12:12:41 coverage filter: resize_stripes: [resize_stripes] 2025/09/10 12:12:41 coverage filter: setup_conf: [setup_conf setup_conf setup_conf] 2025/09/10 12:12:41 coverage filter: drivers/block/drbd/drbd_nl.c: [] 2025/09/10 12:12:41 coverage filter: drivers/md/md-linear.c: [] 2025/09/10 12:12:41 coverage filter: drivers/md/raid0.c: [drivers/md/raid0.c] 2025/09/10 12:12:41 coverage filter: drivers/md/raid1.c: [drivers/md/raid1.c] 2025/09/10 12:12:41 coverage filter: drivers/md/raid10.c: [drivers/md/raid10.c] 2025/09/10 12:12:41 coverage filter: drivers/md/raid5.c: [drivers/md/raid5-cache.c drivers/md/raid5.c] 2025/09/10 12:12:41 area "symbols": 3175 PCs in the cover filter 2025/09/10 12:12:41 area "files": 9913 PCs in the cover filter 2025/09/10 12:12:41 area "": 0 PCs in the cover filter 2025/09/10 12:12:41 executor cover filter: 0 PCs 2025/09/10 12:12:43 machine check: disabled the following syscalls: mount$esdfs : /proc/filesystems does not contain esdfs mount$incfs : /proc/filesystems does not contain incremental-fs openat$acpi_thermal_rel : failed to open /dev/acpi_thermal_rel: no such file or directory openat$ashmem : failed to open /dev/ashmem: no such file or directory openat$bifrost : failed to open /dev/bifrost: no such file or directory openat$binder : failed to open /dev/binder: no such file or directory openat$camx : failed to open /dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0: no such file or directory openat$capi20 : failed to open /dev/capi20: no such file or directory openat$cdrom1 : failed to open /dev/cdrom1: no such file or directory openat$damon_attrs : failed to open /sys/kernel/debug/damon/attrs: no such file or directory openat$damon_init_regions : failed to open /sys/kernel/debug/damon/init_regions: no such file or directory openat$damon_kdamond_pid : failed to open /sys/kernel/debug/damon/kdamond_pid: no such file or directory openat$damon_mk_contexts : failed to open /sys/kernel/debug/damon/mk_contexts: no such file or directory openat$damon_monitor_on : failed to open /sys/kernel/debug/damon/monitor_on: no such file or directory openat$damon_rm_contexts : failed to open /sys/kernel/debug/damon/rm_contexts: no such file or directory openat$damon_schemes : failed to open /sys/kernel/debug/damon/schemes: no such file or directory openat$damon_target_ids : failed to open /sys/kernel/debug/damon/target_ids: no such file or directory openat$hwbinder : failed to open /dev/hwbinder: no such file or directory openat$i915 : failed to open /dev/i915: no such file or directory openat$img_rogue : failed to open /dev/img-rogue: no such file or directory openat$irnet : failed to open /dev/irnet: no such file or directory openat$keychord : failed to open /dev/keychord: no such file or directory openat$kvm : failed to open /dev/kvm: no such file or directory openat$lightnvm : failed to open /dev/lightnvm/control: no such file or directory openat$mali : failed to open /dev/mali0: no such file or directory openat$md : failed to open /dev/md0: no such file or directory openat$msm : failed to open /dev/msm: no such file or directory openat$ndctl0 : failed to open /dev/ndctl0: no such file or directory openat$nmem0 : failed to open /dev/nmem0: no such file or directory openat$pktcdvd : failed to open /dev/pktcdvd/control: no such file or directory openat$pmem0 : failed to open /dev/pmem0: no such file or directory openat$proc_capi20 : failed to open /proc/capi/capi20: no such file or directory openat$proc_capi20ncci : failed to open /proc/capi/capi20ncci: no such file or directory openat$proc_reclaim : failed to open /proc/self/reclaim: no such file or directory openat$ptp1 : failed to open /dev/ptp1: no such file or directory openat$rnullb : failed to open /dev/rnullb0: no such file or directory openat$selinux_access : failed to open /selinux/access: no such file or directory openat$selinux_attr : selinux is not enabled openat$selinux_avc_cache_stats : failed to open /selinux/avc/cache_stats: no such file or directory openat$selinux_avc_cache_threshold : failed to open /selinux/avc/cache_threshold: no such file or directory openat$selinux_avc_hash_stats : failed to open /selinux/avc/hash_stats: no such file or directory openat$selinux_checkreqprot : failed to open /selinux/checkreqprot: no such file or directory openat$selinux_commit_pending_bools : failed to open /selinux/commit_pending_bools: no such file or directory openat$selinux_context : failed to open /selinux/context: no such file or directory openat$selinux_create : failed to open /selinux/create: no such file or directory openat$selinux_enforce : failed to open /selinux/enforce: no such file or directory openat$selinux_load : failed to open /selinux/load: no such file or directory openat$selinux_member : failed to open /selinux/member: no such file or directory openat$selinux_mls : failed to open /selinux/mls: no such file or directory openat$selinux_policy : failed to open /selinux/policy: no such file or directory openat$selinux_relabel : failed to open /selinux/relabel: no such file or directory openat$selinux_status : failed to open /selinux/status: no such file or directory openat$selinux_user : failed to open /selinux/user: no such file or directory openat$selinux_validatetrans : failed to open /selinux/validatetrans: no such file or directory openat$sev : failed to open /dev/sev: no such file or directory openat$sgx_provision : failed to open /dev/sgx_provision: no such file or directory openat$smack_task_current : smack is not enabled openat$smack_thread_current : smack is not enabled openat$smackfs_access : failed to open /sys/fs/smackfs/access: no such file or directory openat$smackfs_ambient : failed to open /sys/fs/smackfs/ambient: no such file or directory openat$smackfs_change_rule : failed to open /sys/fs/smackfs/change-rule: no such file or directory openat$smackfs_cipso : failed to open /sys/fs/smackfs/cipso: no such file or directory openat$smackfs_cipsonum : failed to open /sys/fs/smackfs/direct: no such file or directory openat$smackfs_ipv6host : failed to open /sys/fs/smackfs/ipv6host: no such file or directory openat$smackfs_load : failed to open /sys/fs/smackfs/load: no such file or directory openat$smackfs_logging : failed to open /sys/fs/smackfs/logging: no such file or directory openat$smackfs_netlabel : failed to open /sys/fs/smackfs/netlabel: no such file or directory openat$smackfs_onlycap : failed to open /sys/fs/smackfs/onlycap: no such file or directory openat$smackfs_ptrace : failed to open /sys/fs/smackfs/ptrace: no such file or directory openat$smackfs_relabel_self : failed to open /sys/fs/smackfs/relabel-self: no such file or directory openat$smackfs_revoke_subject : failed to open /sys/fs/smackfs/revoke-subject: no such file or directory openat$smackfs_syslog : failed to open /sys/fs/smackfs/syslog: no such file or directory openat$smackfs_unconfined : failed to open /sys/fs/smackfs/unconfined: no such file or directory openat$tlk_device : failed to open /dev/tlk_device: no such file or directory openat$trusty : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_avb : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_gatekeeper : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwkey : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_hwrng : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_km_secure : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$trusty_storage : failed to open /dev/trusty-ipc-dev0: no such file or directory openat$tty : failed to open /dev/tty: no such device or address openat$uverbs0 : failed to open /dev/infiniband/uverbs0: no such file or directory openat$vfio : failed to open /dev/vfio/vfio: no such file or directory openat$vndbinder : failed to open /dev/vndbinder: no such file or directory openat$vtpm : failed to open /dev/vtpmx: no such file or directory openat$xenevtchn : failed to open /dev/xen/evtchn: no such file or directory openat$zygote : failed to open /dev/socket/zygote: no such file or directory read$smackfs_access : smack is not enabled read$smackfs_cipsonum : smack is not enabled read$smackfs_logging : smack is not enabled read$smackfs_ptrace : smack is not enabled syz_mount_image$ntfs : /proc/filesystems does not contain ntfs syz_mount_image$reiserfs : /proc/filesystems does not contain reiserfs syz_mount_image$sysv : /proc/filesystems does not contain sysv syz_mount_image$v7 : /proc/filesystems does not contain v7 write$selinux_access : selinux is not enabled write$selinux_attr : selinux is not enabled write$selinux_context : selinux is not enabled write$selinux_create : selinux is not enabled write$selinux_load : selinux is not enabled write$selinux_user : selinux is not enabled write$selinux_validatetrans : selinux is not enabled write$smack_current : smack is not enabled write$smackfs_access : smack is not enabled write$smackfs_change_rule : smack is not enabled write$smackfs_cipso : smack is not enabled write$smackfs_cipsonum : smack is not enabled write$smackfs_ipv6host : smack is not enabled write$smackfs_label : smack is not enabled write$smackfs_labels_list : smack is not enabled write$smackfs_load : smack is not enabled write$smackfs_logging : smack is not enabled write$smackfs_netlabel : smack is not enabled write$smackfs_ptrace : smack is not enabled transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] futimesat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] mmap$DRM_I915 : fd_i915 [openat$i915] mmap$DRM_MSM : fd_msm [openat$msm] mmap$IORING_OFF_CQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQES : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$IORING_OFF_SQ_RING : fd_io_uring [io_uring_setup syz_io_uring_setup] mmap$KVM_VCPU : vcpu_mmap_size [ioctl$KVM_GET_VCPU_MMAP_SIZE] mmap$bifrost : fd_bifrost [openat$bifrost openat$mali] mmap$perf : fd_perf [perf_event_open perf_event_open$cgroup] mmap$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_control : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$snddsp_status : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] mmap$usbfs : fd_usbfs [syz_open_dev$usbfs] mmap$usbmon : fd_usbmon [syz_open_dev$usbmon] mmap$xdp : sock_xdp [socket$xdp] mount$9p_fd : rfd9p [pipe2$9p] openat$binfmt : ptr_binfmt_file [syz_create_resource$binfmt] read$alg : sock_algconn [accept$alg accept4$alg] read$char_usb : fd_char_usb [syz_open_dev$char_usb] read$eventfd : fd_event [eventfd eventfd2] read$hiddev : fd_hiddev [syz_open_dev$hiddev] read$hidraw : fd_hidraw [syz_open_dev$hidraw] read$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] read$msr : fd_msr [syz_open_dev$MSR] read$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] read$sndhw : fd_snd_hw [syz_open_dev$sndhw] read$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] read$usbfs : fd_usbfs [syz_open_dev$usbfs] read$usbmon : fd_usbmon [syz_open_dev$usbmon] read$watch_queue : fd_watch_queue [pipe2$watch_queue] select : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimensat : time_usec [getitimer getrusage getsockopt$sock_timeval ...] utimes : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$9p : wfd9p [pipe2$9p] write$ALLOC_MW : fd_rdma [openat$uverbs0] write$ALLOC_PD : fd_rdma [openat$uverbs0] write$ATTACH_MCAST : fd_rdma [openat$uverbs0] write$CLOSE_XRCD : fd_rdma [openat$uverbs0] write$CREATE_AH : fd_rdma [openat$uverbs0] write$CREATE_COMP_CHANNEL : fd_rdma [openat$uverbs0] write$CREATE_CQ : fd_rdma [openat$uverbs0] write$CREATE_CQ_EX : fd_rdma [openat$uverbs0] write$CREATE_FLOW : fd_rdma [openat$uverbs0] write$CREATE_QP : fd_rdma [openat$uverbs0] write$CREATE_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$CREATE_SRQ : fd_rdma [openat$uverbs0] write$CREATE_WQ : fd_rdma [openat$uverbs0] write$DEALLOC_MW : fd_rdma [openat$uverbs0] write$DEALLOC_PD : fd_rdma [openat$uverbs0] write$DEREG_MR : fd_rdma [openat$uverbs0] write$DESTROY_AH : fd_rdma [openat$uverbs0] write$DESTROY_CQ : fd_rdma [openat$uverbs0] write$DESTROY_FLOW : fd_rdma [openat$uverbs0] write$DESTROY_QP : fd_rdma [openat$uverbs0] write$DESTROY_RWQ_IND_TBL : fd_rdma [openat$uverbs0] write$DESTROY_SRQ : fd_rdma [openat$uverbs0] write$DESTROY_WQ : fd_rdma [openat$uverbs0] write$DETACH_MCAST : fd_rdma [openat$uverbs0] write$MLX5_ALLOC_PD : fd_rdma [openat$uverbs0] write$MLX5_CREATE_CQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_DV_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_QP : fd_rdma [openat$uverbs0] write$MLX5_CREATE_SRQ : fd_rdma [openat$uverbs0] write$MLX5_CREATE_WQ : fd_rdma [openat$uverbs0] write$MLX5_GET_CONTEXT : fd_rdma [openat$uverbs0] write$MLX5_MODIFY_WQ : fd_rdma [openat$uverbs0] write$MODIFY_QP : fd_rdma [openat$uverbs0] write$MODIFY_SRQ : fd_rdma [openat$uverbs0] write$OPEN_XRCD : fd_rdma [openat$uverbs0] write$P9_RATTACH : wfd9p [pipe2$9p] write$P9_RAUTH : wfd9p [pipe2$9p] write$P9_RCLUNK : wfd9p [pipe2$9p] write$P9_RCREATE : wfd9p [pipe2$9p] write$P9_RFLUSH : wfd9p [pipe2$9p] write$P9_RFSYNC : wfd9p [pipe2$9p] write$P9_RGETATTR : wfd9p [pipe2$9p] write$P9_RGETLOCK : wfd9p [pipe2$9p] write$P9_RLCREATE : wfd9p [pipe2$9p] write$P9_RLERROR : wfd9p [pipe2$9p] write$P9_RLERRORu : wfd9p [pipe2$9p] write$P9_RLINK : wfd9p [pipe2$9p] write$P9_RLOCK : wfd9p [pipe2$9p] write$P9_RLOPEN : wfd9p [pipe2$9p] write$P9_RMKDIR : wfd9p [pipe2$9p] write$P9_RMKNOD : wfd9p [pipe2$9p] write$P9_ROPEN : wfd9p [pipe2$9p] write$P9_RREAD : wfd9p [pipe2$9p] write$P9_RREADDIR : wfd9p [pipe2$9p] write$P9_RREADLINK : wfd9p [pipe2$9p] write$P9_RREMOVE : wfd9p [pipe2$9p] write$P9_RRENAME : wfd9p [pipe2$9p] write$P9_RRENAMEAT : wfd9p [pipe2$9p] write$P9_RSETATTR : wfd9p [pipe2$9p] write$P9_RSTAT : wfd9p [pipe2$9p] write$P9_RSTATFS : wfd9p [pipe2$9p] write$P9_RSTATu : wfd9p [pipe2$9p] write$P9_RSYMLINK : wfd9p [pipe2$9p] write$P9_RUNLINKAT : wfd9p [pipe2$9p] write$P9_RVERSION : wfd9p [pipe2$9p] write$P9_RWALK : wfd9p [pipe2$9p] write$P9_RWRITE : wfd9p [pipe2$9p] write$P9_RWSTAT : wfd9p [pipe2$9p] write$P9_RXATTRCREATE : wfd9p [pipe2$9p] write$P9_RXATTRWALK : wfd9p [pipe2$9p] write$POLL_CQ : fd_rdma [openat$uverbs0] write$POST_RECV : fd_rdma [openat$uverbs0] write$POST_SEND : fd_rdma [openat$uverbs0] write$POST_SRQ_RECV : fd_rdma [openat$uverbs0] write$QUERY_DEVICE_EX : fd_rdma [openat$uverbs0] write$QUERY_PORT : fd_rdma [openat$uverbs0] write$QUERY_QP : fd_rdma [openat$uverbs0] write$QUERY_SRQ : fd_rdma [openat$uverbs0] write$REG_MR : fd_rdma [openat$uverbs0] write$REQ_NOTIFY_CQ : fd_rdma [openat$uverbs0] write$REREG_MR : fd_rdma [openat$uverbs0] write$RESIZE_CQ : fd_rdma [openat$uverbs0] write$binfmt_aout : fd_binfmt [openat$binfmt] write$binfmt_elf32 : fd_binfmt [openat$binfmt] write$binfmt_elf64 : fd_binfmt [openat$binfmt] write$binfmt_misc : fd_binfmt [openat$binfmt] write$binfmt_script : fd_binfmt [openat$binfmt] write$bt_hci : sock_bt_hci [syz_init_net_socket$bt_hci] write$capi20 : fd_capi20 [openat$capi20] write$capi20_data : fd_capi20 [openat$capi20] write$char_usb : fd_char_usb [syz_open_dev$char_usb] write$damon_attrs : fd_damon_attrs [openat$damon_attrs] write$damon_contexts : fd_damon_contexts [openat$damon_mk_contexts openat$damon_rm_contexts] write$damon_init_regions : fd_damon_init_regions [openat$damon_init_regions] write$damon_monitor_on : fd_damon_monitor_on [openat$damon_monitor_on] write$damon_schemes : fd_damon_schemes [openat$damon_schemes] write$damon_target_ids : fd_damon_target_ids [openat$damon_target_ids] write$evdev : fd_evdev [syz_open_dev$evdev] write$eventfd : fd_event [eventfd eventfd2] write$hidraw : fd_hidraw [syz_open_dev$hidraw] write$input_event : time_usec [getitimer getrusage getsockopt$sock_timeval ...] write$midi : fd_midi [syz_open_dev$admmidi syz_open_dev$amidi syz_open_dev$dmmidi syz_open_dev$midi syz_open_dev$sndmidi] write$nbd : sock_nbd_server [socketpair$nbd] write$proc_reclaim : fd_proc_reclaim [openat$proc_reclaim] write$snddsp : fd_snd_dsp [syz_open_dev$sndpcmc syz_open_dev$sndpcmp] write$sndhw : fd_snd_hw [syz_open_dev$sndhw] write$sndhw_fireworks : fd_snd_hw [syz_open_dev$sndhw] write$trusty : fd_trusty [openat$trusty openat$trusty_avb openat$trusty_gatekeeper ...] write$trusty_avb : fd_trusty_avb [openat$trusty_avb] write$trusty_gatekeeper : fd_trusty_gatekeeper [openat$trusty_gatekeeper] write$trusty_hwkey : fd_trusty_hwkey [openat$trusty_hwkey] write$trusty_hwrng : fd_trusty_hwrng [openat$trusty_hwrng] write$trusty_km : fd_trusty_km [openat$trusty_km] write$trusty_km_secure : fd_trusty_km_secure [openat$trusty_km_secure] write$trusty_storage : fd_trusty_storage [openat$trusty_storage] write$tun : tcp_seq_num [syz_extract_tcp_res syz_extract_tcp_res$synack] write$usbip_server : fd_usbip_server [syz_usbip_server_init] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 571/8054 2025/09/10 12:12:43 new: machine check complete 2025/09/10 12:12:43 new: adding 12522 seeds 2025/09/10 12:14:36 base crash "possible deadlock in dqget" is already known 2025/09/10 12:14:36 patched crashed: possible deadlock in dqget [need repro = false] 2025/09/10 12:15:11 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/10 12:15:11 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:15:22 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/10 12:15:22 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:15:24 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/10 12:15:24 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:15:25 base crash "kernel BUG in hfs_write_inode" is already known 2025/09/10 12:15:25 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:15:33 runner 5 connected 2025/09/10 12:16:08 runner 2 connected 2025/09/10 12:16:18 base crash: possible deadlock in dqget 2025/09/10 12:16:18 runner 6 connected 2025/09/10 12:16:20 runner 7 connected 2025/09/10 12:16:22 runner 4 connected 2025/09/10 12:16:42 STAT { "buffer too small": 0, "candidate triage jobs": 58, "candidates": 9123, "comps overflows": 0, "corpus": 3269, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 939, "coverage": 87054, "distributor delayed": 3012, "distributor undelayed": 3012, "distributor violated": 0, "exec candidate": 3399, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 0, "exec seeds": 0, "exec smash": 0, "exec total [base]": 6943, "exec total [new]": 15241, "exec triage": 10330, "executor restarts [base]": 85, "executor restarts [new]": 172, "fault jobs": 0, "fuzzer jobs": 58, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 88215, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 3399, "no exec duration": 24080000000, "no exec requests": 140, "pending": 0, "prog exec time": 451, "reproducing": 0, "rpc recv": 1454432128, "rpc sent": 354823328, "signal": 86319, "smash jobs": 0, "triage jobs": 0, "vm output": 7737665, "vm restarts [base]": 4, "vm restarts [new]": 15 } 2025/09/10 12:17:15 runner 1 connected 2025/09/10 12:17:41 base crash "possible deadlock in run_unpack_ex" is already known 2025/09/10 12:17:41 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/10 12:17:52 base crash "possible deadlock in run_unpack_ex" is already known 2025/09/10 12:17:52 patched crashed: possible deadlock in run_unpack_ex [need repro = false] 2025/09/10 12:18:09 base crash: kernel BUG in hfs_write_inode 2025/09/10 12:18:18 base crash "WARNING in dbAdjTree" is already known 2025/09/10 12:18:18 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/10 12:18:24 base crash "kernel BUG in txUnlock" is already known 2025/09/10 12:18:24 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/10 12:18:25 base crash "kernel BUG in txUnlock" is already known 2025/09/10 12:18:25 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/10 12:18:26 base crash "kernel BUG in txUnlock" is already known 2025/09/10 12:18:26 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/10 12:18:28 base crash "WARNING in dbAdjTree" is already known 2025/09/10 12:18:28 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/10 12:18:37 runner 2 connected 2025/09/10 12:18:40 runner 0 connected 2025/09/10 12:18:59 runner 2 connected 2025/09/10 12:19:07 runner 9 connected 2025/09/10 12:19:14 runner 4 connected 2025/09/10 12:19:19 base crash: possible deadlock in run_unpack_ex 2025/09/10 12:19:20 runner 5 connected 2025/09/10 12:19:23 runner 1 connected 2025/09/10 12:19:25 runner 3 connected 2025/09/10 12:20:00 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:20:01 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:20:03 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:20:03 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:20:14 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:20:15 runner 1 connected 2025/09/10 12:20:29 base crash "possible deadlock in mark_as_free_ex" is already known 2025/09/10 12:20:29 patched crashed: possible deadlock in mark_as_free_ex [need repro = false] 2025/09/10 12:20:50 runner 1 connected 2025/09/10 12:20:54 base crash: kernel BUG in hfs_write_inode 2025/09/10 12:20:54 base crash: kernel BUG in txUnlock 2025/09/10 12:20:57 runner 5 connected 2025/09/10 12:20:59 runner 8 connected 2025/09/10 12:21:00 runner 4 connected 2025/09/10 12:21:03 runner 3 connected 2025/09/10 12:21:20 runner 7 connected 2025/09/10 12:21:42 STAT { "buffer too small": 0, "candidate triage jobs": 45, "candidates": 6288, "comps overflows": 0, "corpus": 6024, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 2097, "coverage": 100616, "distributor delayed": 6131, "distributor undelayed": 6131, "distributor violated": 0, "exec candidate": 6234, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 13757, "exec total [new]": 29541, "exec triage": 18953, "executor restarts [base]": 135, "executor restarts [new]": 330, "fault jobs": 0, "fuzzer jobs": 45, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 10, "hints jobs": 0, "max signal": 101555, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 6233, "no exec duration": 24080000000, "no exec requests": 140, "pending": 0, "prog exec time": 242, "reproducing": 0, "rpc recv": 2692245660, "rpc sent": 715372528, "signal": 99601, "smash jobs": 0, "triage jobs": 0, "vm output": 14872348, "vm restarts [base]": 7, "vm restarts [new]": 28 } 2025/09/10 12:21:44 runner 3 connected 2025/09/10 12:21:51 runner 1 connected 2025/09/10 12:22:28 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:22:29 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:22:30 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:22:31 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:22:43 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:22:57 base crash: kernel BUG in hfs_write_inode 2025/09/10 12:23:18 runner 1 connected 2025/09/10 12:23:20 runner 8 connected 2025/09/10 12:23:24 runner 2 connected 2025/09/10 12:23:28 runner 7 connected 2025/09/10 12:23:32 runner 3 connected 2025/09/10 12:23:54 runner 1 connected 2025/09/10 12:24:18 base crash: possible deadlock in ntfs_fiemap 2025/09/10 12:24:32 base crash "WARNING in dbAdjTree" is already known 2025/09/10 12:24:32 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/10 12:24:33 base crash "INFO: task hung in evict" is already known 2025/09/10 12:24:33 patched crashed: INFO: task hung in evict [need repro = false] 2025/09/10 12:25:14 runner 3 connected 2025/09/10 12:25:28 runner 8 connected 2025/09/10 12:25:29 runner 5 connected 2025/09/10 12:26:07 base crash "WARNING in dbAdjTree" is already known 2025/09/10 12:26:07 patched crashed: WARNING in dbAdjTree [need repro = false] 2025/09/10 12:26:42 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 4575, "comps overflows": 0, "corpus": 7559, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 3005, "coverage": 106262, "distributor delayed": 7546, "distributor undelayed": 7546, "distributor violated": 2, "exec candidate": 7947, "exec collide": 0, "exec fuzz": 0, "exec gen": 0, "exec hints": 0, "exec inject": 0, "exec minimize": 0, "exec retries": 4, "exec seeds": 0, "exec smash": 0, "exec total [base]": 21126, "exec total [new]": 46861, "exec triage": 23676, "executor restarts [base]": 197, "executor restarts [new]": 481, "fault jobs": 0, "fuzzer jobs": 0, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 9, "hints jobs": 0, "max signal": 106939, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 0, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 7764, "no exec duration": 24080000000, "no exec requests": 140, "pending": 0, "prog exec time": 414, "reproducing": 0, "rpc recv": 3597074240, "rpc sent": 1136653384, "signal": 105210, "smash jobs": 0, "triage jobs": 0, "vm output": 25319594, "vm restarts [base]": 11, "vm restarts [new]": 35 } 2025/09/10 12:27:05 runner 0 connected 2025/09/10 12:27:42 triaged 98.7% of the corpus 2025/09/10 12:27:42 starting bug reproductions 2025/09/10 12:27:42 starting bug reproductions (max 10 VMs, 7 repros) 2025/09/10 12:27:56 base crash "possible deadlock in ocfs2_try_remove_refcount_tree" is already known 2025/09/10 12:27:56 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:28:12 triaged 100.0% of the corpus 2025/09/10 12:28:33 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:28:39 base crash "kernel BUG in may_open" is already known 2025/09/10 12:28:39 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/10 12:28:52 runner 7 connected 2025/09/10 12:28:58 base crash "kernel BUG in may_open" is already known 2025/09/10 12:28:58 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/10 12:29:28 base crash: kernel BUG in may_open 2025/09/10 12:29:30 runner 1 connected 2025/09/10 12:29:35 runner 1 connected 2025/09/10 12:29:55 runner 6 connected 2025/09/10 12:30:02 patched crashed: KASAN: slab-use-after-free Read in jfs_lazycommit [need repro = true] 2025/09/10 12:30:02 scheduled a reproduction of 'KASAN: slab-use-after-free Read in jfs_lazycommit' 2025/09/10 12:30:02 start reproducing 'KASAN: slab-use-after-free Read in jfs_lazycommit' 2025/09/10 12:30:11 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/10 12:30:20 base crash "kernel BUG in jfs_evict_inode" is already known 2025/09/10 12:30:20 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:30:25 runner 0 connected 2025/09/10 12:30:38 base crash: kernel BUG in jfs_evict_inode 2025/09/10 12:30:54 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:30:58 runner 9 connected 2025/09/10 12:31:01 runner 4 connected 2025/09/10 12:31:17 runner 7 connected 2025/09/10 12:31:23 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:31:27 runner 1 connected 2025/09/10 12:31:33 base crash: possible deadlock in ntfs_fiemap 2025/09/10 12:31:42 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 17, "corpus": 7698, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 5976, "coverage": 106929, "distributor delayed": 7782, "distributor undelayed": 7782, "distributor violated": 2, "exec candidate": 12522, "exec collide": 434, "exec fuzz": 825, "exec gen": 32, "exec hints": 126, "exec inject": 0, "exec minimize": 2484, "exec retries": 5, "exec seeds": 205, "exec smash": 491, "exec total [base]": 26214, "exec total [new]": 56669, "exec triage": 24295, "executor restarts [base]": 264, "executor restarts [new]": 622, "fault jobs": 0, "fuzzer jobs": 238, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 4, "hints jobs": 95, "max signal": 108355, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 1726, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8005, "no exec duration": 25117000000, "no exec requests": 142, "pending": 0, "prog exec time": 729, "reproducing": 1, "rpc recv": 4264892292, "rpc sent": 1640831336, "signal": 105773, "smash jobs": 119, "triage jobs": 24, "vm output": 33612253, "vm restarts [base]": 14, "vm restarts [new]": 42 } 2025/09/10 12:31:42 base crash "kernel BUG in dbFindLeaf" is already known 2025/09/10 12:31:42 patched crashed: kernel BUG in dbFindLeaf [need repro = false] 2025/09/10 12:31:42 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:31:44 runner 2 connected 2025/09/10 12:31:55 base crash: kernel BUG in may_open 2025/09/10 12:31:58 reproducing crash 'KASAN: slab-use-after-free Read in jfs_lazycommit': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jfs/inode.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/10 12:32:08 base crash: kernel BUG in jfs_evict_inode 2025/09/10 12:32:11 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/10 12:32:14 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:32:20 runner 5 connected 2025/09/10 12:32:22 runner 2 connected 2025/09/10 12:32:31 runner 9 connected 2025/09/10 12:32:32 runner 6 connected 2025/09/10 12:32:45 runner 1 connected 2025/09/10 12:32:49 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:32:57 runner 0 connected 2025/09/10 12:33:00 runner 2 connected 2025/09/10 12:33:04 runner 8 connected 2025/09/10 12:33:04 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:33:28 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:33:33 reproducing crash 'KASAN: slab-use-after-free Read in jfs_lazycommit': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jfs/inode.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/10 12:33:33 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:33:42 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:33:44 base crash: possible deadlock in ocfs2_del_inode_from_orphan 2025/09/10 12:33:46 runner 2 connected 2025/09/10 12:33:52 base crash "possible deadlock in ocfs2_fiemap" is already known 2025/09/10 12:33:52 patched crashed: possible deadlock in ocfs2_fiemap [need repro = false] 2025/09/10 12:33:53 runner 7 connected 2025/09/10 12:34:18 runner 5 connected 2025/09/10 12:34:21 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/10 12:34:22 runner 2 connected 2025/09/10 12:34:23 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:34:31 runner 1 connected 2025/09/10 12:34:33 runner 0 connected 2025/09/10 12:34:43 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:34:44 runner 8 connected 2025/09/10 12:35:13 runner 4 connected 2025/09/10 12:35:18 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:35:18 runner 7 connected 2025/09/10 12:35:24 base crash: kernel BUG in jfs_evict_inode 2025/09/10 12:35:32 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:35:34 runner 3 connected 2025/09/10 12:35:52 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/09/10 12:36:09 runner 2 connected 2025/09/10 12:36:20 runner 2 connected 2025/09/10 12:36:21 runner 8 connected 2025/09/10 12:36:35 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:36:40 runner 5 connected 2025/09/10 12:36:42 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 210, "corpus": 7805, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 9094, "coverage": 107475, "distributor delayed": 7993, "distributor undelayed": 7993, "distributor violated": 2, "exec candidate": 12522, "exec collide": 773, "exec fuzz": 1472, "exec gen": 61, "exec hints": 242, "exec inject": 0, "exec minimize": 4729, "exec retries": 6, "exec seeds": 543, "exec smash": 1052, "exec total [base]": 28346, "exec total [new]": 61374, "exec triage": 24701, "executor restarts [base]": 319, "executor restarts [new]": 731, "fault jobs": 0, "fuzzer jobs": 398, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 7, "hints jobs": 159, "max signal": 109217, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 3419, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8169, "no exec duration": 25361000000, "no exec requests": 145, "pending": 0, "prog exec time": 380, "reproducing": 1, "rpc recv": 5371063464, "rpc sent": 2001321352, "signal": 106274, "smash jobs": 216, "triage jobs": 23, "vm output": 38892325, "vm restarts [base]": 22, "vm restarts [new]": 57 } 2025/09/10 12:36:53 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:36:55 base crash "possible deadlock in lookup_slow" is already known 2025/09/10 12:36:55 patched crashed: possible deadlock in lookup_slow [need repro = false] 2025/09/10 12:36:55 base crash: possible deadlock in ocfs2_evict_inode 2025/09/10 12:37:19 patched crashed: kernel BUG in may_open [need repro = false] 2025/09/10 12:37:19 base crash: kernel BUG in jfs_evict_inode 2025/09/10 12:37:31 runner 3 connected 2025/09/10 12:37:44 runner 6 connected 2025/09/10 12:37:45 runner 0 connected 2025/09/10 12:37:49 runner 8 connected 2025/09/10 12:38:01 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:38:07 base crash: kernel BUG in may_open 2025/09/10 12:38:07 runner 2 connected 2025/09/10 12:38:07 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:38:10 runner 1 connected 2025/09/10 12:38:27 reproducing crash 'KASAN: slab-use-after-free Read in jfs_lazycommit': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jfs/inode.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/10 12:38:34 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:38:56 runner 0 connected 2025/09/10 12:38:58 runner 3 connected 2025/09/10 12:39:02 base crash: kernel BUG in jfs_evict_inode 2025/09/10 12:39:04 runner 2 connected 2025/09/10 12:39:22 runner 9 connected 2025/09/10 12:39:29 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:39:53 base crash "possible deadlock in ocfs2_xattr_set" is already known 2025/09/10 12:39:53 patched crashed: possible deadlock in ocfs2_xattr_set [need repro = false] 2025/09/10 12:39:56 base crash "possible deadlock in ocfs2_xattr_set" is already known 2025/09/10 12:39:56 patched crashed: possible deadlock in ocfs2_xattr_set [need repro = false] 2025/09/10 12:39:58 runner 3 connected 2025/09/10 12:40:19 reproducing crash 'KASAN: slab-use-after-free Read in jfs_lazycommit': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jfs/inode.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/10 12:40:27 runner 1 connected 2025/09/10 12:40:32 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:40:40 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/09/10 12:40:42 runner 8 connected 2025/09/10 12:40:47 runner 3 connected 2025/09/10 12:40:53 patched crashed: kernel BUG in txUnlock [need repro = false] 2025/09/10 12:41:09 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:41:20 reproducing crash 'KASAN: slab-use-after-free Read in jfs_lazycommit': failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f fs/jfs/inode.c]: fork/exec scripts/get_maintainer.pl: no such file or directory 2025/09/10 12:41:20 repro finished 'KASAN: slab-use-after-free Read in jfs_lazycommit', repro=true crepro=false desc='kernel BUG in jfs_evict_inode' hub=false from_dashboard=false 2025/09/10 12:41:20 found repro for "kernel BUG in jfs_evict_inode" (orig title: "KASAN: slab-use-after-free Read in jfs_lazycommit", reliability: 1), took 10.43 minutes 2025/09/10 12:41:20 "kernel BUG in jfs_evict_inode": saved crash log into 1757508080.crash.log 2025/09/10 12:41:20 "kernel BUG in jfs_evict_inode": saved repro log into 1757508080.repro.log 2025/09/10 12:41:21 runner 1 connected 2025/09/10 12:41:24 patched crashed: possible deadlock in ocfs2_del_inode_from_orphan [need repro = false] 2025/09/10 12:41:26 base crash: possible deadlock in ocfs2_del_inode_from_orphan 2025/09/10 12:41:29 runner 6 connected 2025/09/10 12:41:37 runner 7 connected 2025/09/10 12:41:41 runner 2 connected 2025/09/10 12:41:42 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 329, "corpus": 7902, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 11781, "coverage": 108043, "distributor delayed": 8177, "distributor undelayed": 8177, "distributor violated": 2, "exec candidate": 12522, "exec collide": 1140, "exec fuzz": 2216, "exec gen": 103, "exec hints": 461, "exec inject": 0, "exec minimize": 6803, "exec retries": 6, "exec seeds": 791, "exec smash": 1737, "exec total [base]": 30386, "exec total [new]": 66173, "exec triage": 25116, "executor restarts [base]": 384, "executor restarts [new]": 855, "fault jobs": 0, "fuzzer jobs": 488, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 3, "hints jobs": 183, "max signal": 110234, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 4912, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8335, "no exec duration": 25361000000, "no exec requests": 145, "pending": 0, "prog exec time": 652, "reproducing": 0, "rpc recv": 6283537288, "rpc sent": 2383581456, "signal": 106649, "smash jobs": 290, "triage jobs": 15, "vm output": 45734629, "vm restarts [base]": 29, "vm restarts [new]": 68 } 2025/09/10 12:41:45 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:41:46 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:41:57 runner 3 connected 2025/09/10 12:41:59 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:42:10 runner 0 connected 2025/09/10 12:42:13 runner 8 connected 2025/09/10 12:42:15 runner 2 connected 2025/09/10 12:42:25 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:42:33 runner 4 connected 2025/09/10 12:42:36 runner 5 connected 2025/09/10 12:42:48 runner 6 connected 2025/09/10 12:43:00 attempt #0 to run "kernel BUG in jfs_evict_inode" on base: crashed with kernel BUG in jfs_evict_inode 2025/09/10 12:43:00 crashes both: kernel BUG in jfs_evict_inode / kernel BUG in jfs_evict_inode 2025/09/10 12:43:06 base crash: kernel BUG in may_open 2025/09/10 12:43:13 patched crashed: KASAN: slab-use-after-free Read in jfs_lazycommit [need repro = true] 2025/09/10 12:43:13 scheduled a reproduction of 'KASAN: slab-use-after-free Read in jfs_lazycommit' 2025/09/10 12:43:13 start reproducing 'KASAN: slab-use-after-free Read in jfs_lazycommit' 2025/09/10 12:43:15 runner 3 connected 2025/09/10 12:43:28 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:43:31 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:43:50 runner 0 connected 2025/09/10 12:43:55 runner 2 connected 2025/09/10 12:44:20 runner 9 connected 2025/09/10 12:44:20 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:44:24 runner 6 connected 2025/09/10 12:44:26 base crash: INFO: trying to register non-static key in txEnd 2025/09/10 12:44:27 patched crashed: INFO: trying to register non-static key in txEnd [need repro = false] 2025/09/10 12:44:30 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:45:09 runner 2 connected 2025/09/10 12:45:16 runner 3 connected 2025/09/10 12:45:17 runner 2 connected 2025/09/10 12:45:17 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:45:20 runner 8 connected 2025/09/10 12:45:26 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:45:38 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:45:41 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:45:43 base crash: possible deadlock in lookup_slow 2025/09/10 12:45:59 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:46:05 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:46:06 runner 7 connected 2025/09/10 12:46:06 base crash: kernel BUG in jfs_evict_inode 2025/09/10 12:46:15 runner 4 connected 2025/09/10 12:46:27 runner 6 connected 2025/09/10 12:46:29 runner 3 connected 2025/09/10 12:46:33 runner 0 connected 2025/09/10 12:46:41 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:46:42 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 436, "corpus": 8007, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 15510, "coverage": 108724, "distributor delayed": 8333, "distributor undelayed": 8333, "distributor violated": 2, "exec candidate": 12522, "exec collide": 1490, "exec fuzz": 2825, "exec gen": 137, "exec hints": 641, "exec inject": 0, "exec minimize": 8990, "exec retries": 7, "exec seeds": 992, "exec smash": 2351, "exec total [base]": 32639, "exec total [new]": 70708, "exec triage": 25449, "executor restarts [base]": 431, "executor restarts [new]": 952, "fault jobs": 0, "fuzzer jobs": 650, "fuzzing VMs [base]": 2, "fuzzing VMs [new]": 3, "hints jobs": 250, "max signal": 110868, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 6237, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8474, "no exec duration": 25706000000, "no exec requests": 146, "pending": 0, "prog exec time": 594, "reproducing": 1, "rpc recv": 7401381804, "rpc sent": 2783370344, "signal": 107305, "smash jobs": 385, "triage jobs": 15, "vm output": 51444526, "vm restarts [base]": 34, "vm restarts [new]": 84 } 2025/09/10 12:46:44 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:46:44 base crash "WARNING in hfs_bnode_create" is already known 2025/09/10 12:46:44 patched crashed: WARNING in hfs_bnode_create [need repro = false] 2025/09/10 12:46:46 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:46:48 runner 5 connected 2025/09/10 12:46:55 runner 8 connected 2025/09/10 12:46:55 base crash: possible deadlock in ocfs2_del_inode_from_orphan 2025/09/10 12:46:56 runner 1 connected 2025/09/10 12:47:30 runner 2 connected 2025/09/10 12:47:32 runner 4 connected 2025/09/10 12:47:34 runner 9 connected 2025/09/10 12:47:36 runner 7 connected 2025/09/10 12:47:41 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:47:44 runner 3 connected 2025/09/10 12:47:46 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:47:47 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:48:08 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:48:12 base crash: WARNING in bch2_trans_srcu_unlock 2025/09/10 12:48:19 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:48:21 base crash: kernel BUG in jfs_evict_inode 2025/09/10 12:48:35 runner 0 connected 2025/09/10 12:48:38 runner 3 connected 2025/09/10 12:48:44 runner 5 connected 2025/09/10 12:48:46 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:48:56 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:48:58 runner 6 connected 2025/09/10 12:49:01 runner 1 connected 2025/09/10 12:49:09 runner 4 connected 2025/09/10 12:49:11 runner 3 connected 2025/09/10 12:49:36 runner 7 connected 2025/09/10 12:49:42 base crash: KASAN: slab-use-after-free Read in jfs_lazycommit 2025/09/10 12:49:52 runner 2 connected 2025/09/10 12:50:08 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:50:31 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:50:40 runner 3 connected 2025/09/10 12:51:02 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:51:04 runner 3 connected 2025/09/10 12:51:07 base crash "KASAN: slab-out-of-bounds Write in bch2_dirent_init_name" is already known 2025/09/10 12:51:07 patched crashed: KASAN: slab-out-of-bounds Write in bch2_dirent_init_name [need repro = false] 2025/09/10 12:51:19 patched crashed: kernel BUG in jfs_evict_inode [need repro = false] 2025/09/10 12:51:22 runner 0 connected 2025/09/10 12:51:34 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:51:42 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 598, "corpus": 8079, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 18360, "coverage": 109083, "distributor delayed": 8511, "distributor undelayed": 8511, "distributor violated": 2, "exec candidate": 12522, "exec collide": 1893, "exec fuzz": 3564, "exec gen": 181, "exec hints": 837, "exec inject": 0, "exec minimize": 10778, "exec retries": 7, "exec seeds": 1264, "exec smash": 3068, "exec total [base]": 34452, "exec total [new]": 75278, "exec triage": 25848, "executor restarts [base]": 483, "executor restarts [new]": 1052, "fault jobs": 0, "fuzzer jobs": 731, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 5, "hints jobs": 268, "max signal": 112403, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 7417, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8630, "no exec duration": 25706000000, "no exec requests": 146, "pending": 0, "prog exec time": 758, "reproducing": 1, "rpc recv": 8398415496, "rpc sent": 3141874944, "signal": 107629, "smash jobs": 438, "triage jobs": 25, "vm output": 58868979, "vm restarts [base]": 43, "vm restarts [new]": 95 } 2025/09/10 12:51:55 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:51:57 runner 6 connected 2025/09/10 12:51:58 runner 2 connected 2025/09/10 12:52:09 runner 7 connected 2025/09/10 12:52:23 runner 2 connected 2025/09/10 12:52:44 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:52:51 runner 1 connected 2025/09/10 12:52:51 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:53:18 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:53:34 base crash "INFO: task hung in user_get_super" is already known 2025/09/10 12:53:34 patched crashed: INFO: task hung in user_get_super [need repro = false] 2025/09/10 12:53:40 runner 7 connected 2025/09/10 12:53:48 runner 4 connected 2025/09/10 12:54:08 runner 8 connected 2025/09/10 12:54:31 runner 9 connected 2025/09/10 12:54:38 base crash: INFO: task hung in __iterate_supers 2025/09/10 12:55:32 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:55:34 runner 3 connected 2025/09/10 12:55:59 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:56:14 base crash "possible deadlock in hfs_find_init" is already known 2025/09/10 12:56:14 patched crashed: possible deadlock in hfs_find_init [need repro = false] 2025/09/10 12:56:21 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:56:29 patched crashed: possible deadlock in ocfs2_try_remove_refcount_tree [need repro = false] 2025/09/10 12:56:30 runner 7 connected 2025/09/10 12:56:38 base crash: possible deadlock in ocfs2_try_remove_refcount_tree 2025/09/10 12:56:42 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 874, "corpus": 8177, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 24129, "coverage": 109711, "distributor delayed": 8736, "distributor undelayed": 8736, "distributor violated": 2, "exec candidate": 12522, "exec collide": 2759, "exec fuzz": 5158, "exec gen": 266, "exec hints": 1309, "exec inject": 0, "exec minimize": 12719, "exec retries": 10, "exec seeds": 1654, "exec smash": 4754, "exec total [base]": 38470, "exec total [new]": 82789, "exec triage": 26318, "executor restarts [base]": 522, "executor restarts [new]": 1129, "fault jobs": 0, "fuzzer jobs": 759, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 3, "hints jobs": 224, "max signal": 113056, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 8538, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 8797, "no exec duration": 26892000000, "no exec requests": 150, "pending": 0, "prog exec time": 633, "reproducing": 1, "rpc recv": 9268624672, "rpc sent": 3770280048, "signal": 108032, "smash jobs": 522, "triage jobs": 13, "vm output": 64499627, "vm restarts [base]": 46, "vm restarts [new]": 103 } 2025/09/10 12:56:50 patched crashed: kernel BUG in hfs_write_inode [need repro = false] 2025/09/10 12:56:55 runner 8 connected 2025/09/10 12:57:03 runner 9 connected 2025/09/10 12:57:10 runner 2 connected 2025/09/10 12:57:21 runner 5 connected 2025/09/10 12:57:26 runner 3 connected 2025/09/10 12:57:40 runner 3 connected 2025/09/10 12:58:08 base crash "kernel BUG in ocfs2_set_new_buffer_uptodate" is already known 2025/09/10 12:58:08 patched crashed: kernel BUG in ocfs2_set_new_buffer_uptodate [need repro = false] 2025/09/10 12:58:12 fuzzer has not reached the modified code in 30m0s, aborting 2025/09/10 12:58:12 syz-diff (base): kernel context loop terminated 2025/09/10 13:00:16 repro finished 'KASAN: slab-use-after-free Read in jfs_lazycommit', repro=false crepro=false desc='' hub=false from_dashboard=false 2025/09/10 13:00:16 syz-diff (new): kernel context loop terminated 2025/09/10 13:00:16 diff fuzzing terminated 2025/09/10 13:00:16 bug reporting terminated 2025/09/10 13:00:16 status reporting terminated 2025/09/10 13:00:16 fuzzing is finished 2025/09/10 13:00:16 status at the end: Title On-Base On-Patched INFO: task hung in __iterate_supers 1 crashes INFO: task hung in evict 1 crashes INFO: task hung in user_get_super 1 crashes INFO: trying to register non-static key in txEnd 1 crashes 1 crashes KASAN: slab-out-of-bounds Write in bch2_dirent_init_name 1 crashes KASAN: slab-use-after-free Read in jfs_lazycommit 1 crashes 2 crashes WARNING in bch2_trans_srcu_unlock 1 crashes WARNING in dbAdjTree 4 crashes WARNING in hfs_bnode_create 1 crashes kernel BUG in dbFindLeaf 1 crashes kernel BUG in hfs_write_inode 3 crashes 18 crashes kernel BUG in jfs_evict_inode 8 crashes 13 crashes[reproduced] kernel BUG in may_open 4 crashes 6 crashes kernel BUG in ocfs2_set_new_buffer_uptodate 1 crashes kernel BUG in txUnlock 1 crashes 4 crashes possible deadlock in dqget 1 crashes 1 crashes possible deadlock in hfs_find_init 1 crashes possible deadlock in lookup_slow 1 crashes 1 crashes possible deadlock in mark_as_free_ex 1 crashes possible deadlock in ntfs_fiemap 2 crashes possible deadlock in ocfs2_del_inode_from_orphan 3 crashes 3 crashes possible deadlock in ocfs2_evict_inode 1 crashes possible deadlock in ocfs2_fiemap 1 crashes possible deadlock in ocfs2_try_remove_refcount_tree 14 crashes 32 crashes possible deadlock in ocfs2_xattr_set 2 crashes possible deadlock in run_unpack_ex 1 crashes 2 crashes