2025/08/18 18:47:50 extracted 303751 symbol hashes for base and 303751 for patched 2025/08/18 18:47:50 adding modified_functions to focus areas: ["nvmet_execute_disc_identify"] 2025/08/18 18:47:50 adding directly modified files to focus areas: ["tools/testing/selftests/kvm/arm64/set_id_regs.c"] 2025/08/18 18:47:52 downloaded the corpus from https://storage.googleapis.com/syzkaller/corpus/ci-upstream-kasan-gce-root-corpus.db 2025/08/18 18:48:49 runner 6 connected 2025/08/18 18:48:49 runner 4 connected 2025/08/18 18:48:49 runner 1 connected 2025/08/18 18:48:49 runner 0 connected 2025/08/18 18:48:49 runner 8 connected 2025/08/18 18:48:49 runner 3 connected 2025/08/18 18:48:49 runner 2 connected 2025/08/18 18:48:49 runner 1 connected 2025/08/18 18:48:50 runner 2 connected 2025/08/18 18:48:50 runner 7 connected 2025/08/18 18:48:50 runner 9 connected 2025/08/18 18:48:50 runner 5 connected 2025/08/18 18:48:50 runner 3 connected 2025/08/18 18:48:56 initializing coverage information... 2025/08/18 18:48:56 executor cover filter: 0 PCs 2025/08/18 18:48:58 machine check: disabled the following syscalls: openat$sev : failed to open /dev/sev: no such file or directory syz_kvm_setup_cpu$ppc64 : unsupported arch transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] ioctl$KVM_CAP_SGX_ATTRIBUTE : fd_sgx_provision [openat$sgx_provision] ioctl$KVM_SEV_CERT_EXPORT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_DECRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_ENCRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_ES_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_GET_ATTESTATION_REPORT : fd_sev [openat$sev] ioctl$KVM_SEV_GUEST_STATUS : fd_sev [openat$sev] ioctl$KVM_SEV_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_INIT2 : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_MEASURE : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_SECRET : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_LAUNCH_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_RECEIVE_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_CANCEL : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_START : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_START : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_UPDATE : fd_sev [openat$sev] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 165/8048 2025/08/18 18:48:58 base: machine check complete 2025/08/18 18:49:00 discovered 7699 source files, 338620 symbols 2025/08/18 18:49:00 coverage filter: nvmet_execute_disc_identify: [nvmet_execute_disc_identify] 2025/08/18 18:49:00 coverage filter: tools/testing/selftests/kvm/arm64/set_id_regs.c: [] 2025/08/18 18:49:00 area "symbols": 15 PCs in the cover filter 2025/08/18 18:49:00 area "files": 0 PCs in the cover filter 2025/08/18 18:49:00 area "": 0 PCs in the cover filter 2025/08/18 18:49:00 executor cover filter: 0 PCs 2025/08/18 18:49:01 machine check: disabled the following syscalls: openat$sev : failed to open /dev/sev: no such file or directory syz_kvm_setup_cpu$ppc64 : unsupported arch transitively disabled the following syscalls (missing resource [creating syscalls]): close$binfmt : fd_binfmt [openat$binfmt] close$fd_v4l2_buffer : fd_v4l2_buffer [ioctl$VIDIOC_QUERYBUF_DMABUF] close$ibv_device : fd_rdma [openat$uverbs0] ioctl$KVM_CAP_SGX_ATTRIBUTE : fd_sgx_provision [openat$sgx_provision] ioctl$KVM_SEV_CERT_EXPORT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_DECRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_DBG_ENCRYPT : fd_sev [openat$sev] ioctl$KVM_SEV_ES_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_GET_ATTESTATION_REPORT : fd_sev [openat$sev] ioctl$KVM_SEV_GUEST_STATUS : fd_sev [openat$sev] ioctl$KVM_SEV_INIT : fd_sev [openat$sev] ioctl$KVM_SEV_INIT2 : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_MEASURE : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_SECRET : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_LAUNCH_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_LAUNCH_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_START : sev_handle [ioctl$KVM_SEV_GUEST_STATUS ioctl$KVM_SEV_LAUNCH_START ioctl$KVM_SEV_RECEIVE_START] ioctl$KVM_SEV_RECEIVE_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_RECEIVE_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_CANCEL : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_START : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_DATA : fd_sev [openat$sev] ioctl$KVM_SEV_SEND_UPDATE_VMSA : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_FINISH : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_START : fd_sev [openat$sev] ioctl$KVM_SEV_SNP_LAUNCH_UPDATE : fd_sev [openat$sev] BinFmtMisc : enabled Comparisons : enabled Coverage : enabled DelayKcovMmap : enabled DevlinkPCI : PCI device 0000:00:10.0 is not available ExtraCoverage : enabled Fault : enabled KCSAN : write(/sys/kernel/debug/kcsan, on) failed KcovResetIoctl : kernel does not support ioctl(KCOV_RESET_TRACE) LRWPANEmulation : enabled Leak : failed to write(kmemleak, "scan=off") NetDevices : enabled NetInjection : enabled NicVF : PCI device 0000:00:11.0 is not available SandboxAndroid : setfilecon: setxattr failed. (errno 1: Operation not permitted). . process exited with status 67. SandboxNamespace : enabled SandboxNone : enabled SandboxSetuid : enabled Swap : enabled USBEmulation : enabled VhciInjection : enabled WifiEmulation : enabled syscalls : 165/8048 2025/08/18 18:49:01 new: machine check complete 2025/08/18 18:49:04 new: adding 2311 seeds 2025/08/18 18:49:23 triaged 99.6% of the corpus 2025/08/18 18:49:23 starting bug reproductions 2025/08/18 18:49:23 triaged 99.6% of the corpus 2025/08/18 18:49:23 starting bug reproductions (max 10 VMs, 7 repros) 2025/08/18 18:52:53 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 5, "corpus": 780, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 0, "coverage": 10644, "distributor delayed": 398, "distributor undelayed": 398, "distributor violated": 0, "exec candidate": 2311, "exec collide": 4485, "exec fuzz": 8726, "exec gen": 466, "exec hints": 1462, "exec inject": 0, "exec minimize": 10194, "exec retries": 0, "exec seeds": 2166, "exec smash": 9822, "exec total [base]": 16919, "exec total [new]": 48517, "exec triage": 2005, "executor restarts": 50, "fault jobs": 0, "fuzzer jobs": 898, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 10, "hints jobs": 177, "max signal": 11010, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 5482, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 856, "no exec duration": 21048000000, "no exec requests": 31, "pending": 0, "prog exec time": 157, "reproducing": 0, "rpc recv": 868127060, "rpc sent": 81701544, "signal": 10315, "smash jobs": 705, "triage jobs": 16, "vm output": 225008, "vm restarts [base]": 3, "vm restarts [new]": 10 } 2025/08/18 18:57:53 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 38, "corpus": 1085, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 54, "coverage": 12288, "distributor delayed": 561, "distributor undelayed": 561, "distributor violated": 0, "exec candidate": 2311, "exec collide": 9641, "exec fuzz": 18350, "exec gen": 970, "exec hints": 3889, "exec inject": 0, "exec minimize": 15306, "exec retries": 0, "exec seeds": 3163, "exec smash": 21678, "exec total [base]": 28641, "exec total [new]": 85004, "exec triage": 2817, "executor restarts": 50, "fault jobs": 0, "fuzzer jobs": 621, "fuzzing VMs [base]": 3, "fuzzing VMs [new]": 10, "hints jobs": 147, "max signal": 12665, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 7868, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1209, "no exec duration": 21141000000, "no exec requests": 33, "pending": 0, "prog exec time": 272, "reproducing": 0, "rpc recv": 1314789484, "rpc sent": 178937928, "signal": 11865, "smash jobs": 465, "triage jobs": 9, "vm output": 325045, "vm restarts [base]": 3, "vm restarts [new]": 10 } 2025/08/18 18:57:59 base: boot error: can't ssh into the instance 2025/08/18 18:58:48 runner 0 connected 2025/08/18 19:02:53 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 61, "corpus": 1296, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 109, "coverage": 12898, "distributor delayed": 655, "distributor undelayed": 655, "distributor violated": 0, "exec candidate": 2311, "exec collide": 14479, "exec fuzz": 27545, "exec gen": 1508, "exec hints": 7655, "exec inject": 0, "exec minimize": 18713, "exec retries": 0, "exec seeds": 3852, "exec smash": 31799, "exec total [base]": 41554, "exec total [new]": 118134, "exec triage": 3393, "executor restarts": 50, "fault jobs": 0, "fuzzer jobs": 84, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 33, "max signal": 13327, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 9431, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1461, "no exec duration": 21141000000, "no exec requests": 33, "pending": 0, "prog exec time": 238, "reproducing": 0, "rpc recv": 1653342100, "rpc sent": 274398472, "signal": 12431, "smash jobs": 42, "triage jobs": 9, "vm output": 518816, "vm restarts [base]": 4, "vm restarts [new]": 10 } 2025/08/18 19:07:53 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 72, "corpus": 1390, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 181, "coverage": 13132, "distributor delayed": 696, "distributor undelayed": 696, "distributor violated": 0, "exec candidate": 2311, "exec collide": 21799, "exec fuzz": 41541, "exec gen": 2216, "exec hints": 12107, "exec inject": 0, "exec minimize": 20315, "exec retries": 0, "exec seeds": 4140, "exec smash": 34387, "exec total [base]": 54622, "exec total [new]": 149318, "exec triage": 3622, "executor restarts": 50, "fault jobs": 0, "fuzzer jobs": 24, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 9, "max signal": 13636, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 10204, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1563, "no exec duration": 21141000000, "no exec requests": 33, "pending": 0, "prog exec time": 273, "reproducing": 0, "rpc recv": 1806513952, "rpc sent": 373449424, "signal": 12654, "smash jobs": 10, "triage jobs": 5, "vm output": 662435, "vm restarts [base]": 4, "vm restarts [new]": 10 } 2025/08/18 19:12:53 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 84, "corpus": 1502, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 337, "coverage": 13500, "distributor delayed": 745, "distributor undelayed": 745, "distributor violated": 0, "exec candidate": 2311, "exec collide": 29050, "exec fuzz": 55552, "exec gen": 2872, "exec hints": 14372, "exec inject": 0, "exec minimize": 22241, "exec retries": 0, "exec seeds": 4481, "exec smash": 37278, "exec total [base]": 66783, "exec total [new]": 178950, "exec triage": 3915, "executor restarts": 50, "fault jobs": 0, "fuzzer jobs": 16, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 6, "max signal": 14058, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 11122, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1692, "no exec duration": 21141000000, "no exec requests": 33, "pending": 0, "prog exec time": 317, "reproducing": 0, "rpc recv": 1971945676, "rpc sent": 467867928, "signal": 13034, "smash jobs": 8, "triage jobs": 2, "vm output": 835474, "vm restarts [base]": 4, "vm restarts [new]": 10 } 2025/08/18 19:17:53 STAT { "buffer too small": 0, "candidate triage jobs": 0, "candidates": 0, "comps overflows": 89, "corpus": 1563, "corpus [files]": 0, "corpus [symbols]": 0, "cover overflows": 468, "coverage": 13695, "distributor delayed": 781, "distributor undelayed": 781, "distributor violated": 0, "exec candidate": 2311, "exec collide": 37082, "exec fuzz": 70755, "exec gen": 3708, "exec hints": 15324, "exec inject": 0, "exec minimize": 23334, "exec retries": 0, "exec seeds": 4668, "exec smash": 38792, "exec total [base]": 78310, "exec total [new]": 206952, "exec triage": 4101, "executor restarts": 50, "fault jobs": 0, "fuzzer jobs": 13, "fuzzing VMs [base]": 4, "fuzzing VMs [new]": 10, "hints jobs": 1, "max signal": 14280, "minimize: array": 0, "minimize: buffer": 0, "minimize: call": 11655, "minimize: filename": 0, "minimize: integer": 0, "minimize: pointer": 0, "minimize: props": 0, "minimize: resource": 0, "modules [base]": 1, "modules [new]": 1, "new inputs": 1771, "no exec duration": 21141000000, "no exec requests": 33, "pending": 0, "prog exec time": 326, "reproducing": 0, "rpc recv": 2080969760, "rpc sent": 562440920, "signal": 13202, "smash jobs": 7, "triage jobs": 5, "vm output": 1037386, "vm restarts [base]": 4, "vm restarts [new]": 10 } 2025/08/18 19:19:23 fuzzer has not reached the modified code in 30m0s, aborting 2025/08/18 19:19:23 syz-diff (base): kernel context loop terminated 2025/08/18 19:19:23 syz-diff (new): kernel context loop terminated 2025/08/18 19:19:23 diff fuzzing terminated 2025/08/18 19:19:23 bug reporting terminated 2025/08/18 19:19:23 status reporting terminated 2025/08/18 19:19:23 fuzzing is finished 2025/08/18 19:19:23 status at the end: Title On-Base On-Patched