Repository navigation
Nightly fuzz failure (v3) #564
Description
The nightly fuzz workflow found one or more failures on v3.
- Run and artifacts: https://github.com/project-minigraf/minigraf/actions/runs/38318336648
- Reproduce: check out
v3at the run's commit, then
cargo +nightly fuzz run <target> fuzz/artifacts/<target>/<crash-file>
Fuzz logs (failed targets only, last 100 lines each)
fuzz-ops_sequence.log
#75080 NEW cov: 8085 ft: 51590 corp: 4526/525Kb lim: 464 exec/s: 75 rss: 630Mb L: 382/451 MS: 5 CopyPart-CopyPart-CrossOver-InsertRepeatedBytes-CopyPart-
#75101 NEW cov: 8085 ft: 51592 corp: 4527/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 396/451 MS: 1 CopyPart-
#75127 REDUCE cov: 8085 ft: 51592 corp: 4527/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 367/451 MS: 1 EraseBytes-
#75154 REDUCE cov: 8085 ft: 51592 corp: 4527/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 26/451 MS: 2 EraseBytes-CMP- DE: "\377\377\377\377"-
#75471 REDUCE cov: 8085 ft: 51592 corp: 4527/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 51/451 MS: 2 ChangeBinInt-EraseBytes-
#75662 NEW cov: 8085 ft: 51596 corp: 4528/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 385/451 MS: 1 CrossOver-
#75800 NEW cov: 8085 ft: 51606 corp: 4529/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 424/451 MS: 3 ShuffleBytes-InsertByte-CopyPart-
#76388 REDUCE cov: 8085 ft: 51606 corp: 4529/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 29/451 MS: 3 ChangeBit-ChangeByte-EraseBytes-
#76705 REDUCE cov: 8085 ft: 51606 corp: 4529/526Kb lim: 464 exec/s: 75 rss: 630Mb L: 132/451 MS: 2 CMP-EraseBytes- DE: "nil"-
#77012 REDUCE cov: 8085 ft: 51614 corp: 4530/527Kb lim: 464 exec/s: 75 rss: 630Mb L: 368/451 MS: 2 CMP-InsertByte- DE: "\000\000\000\377"-
#77789 NEW cov: 8085 ft: 51615 corp: 4531/527Kb lim: 464 exec/s: 75 rss: 630Mb L: 391/451 MS: 2 InsertRepeatedBytes-CopyPart-
#77865 REDUCE cov: 8085 ft: 51615 corp: 4531/527Kb lim: 464 exec/s: 75 rss: 630Mb L: 218/451 MS: 1 EraseBytes-
#77993 NEW cov: 8085 ft: 51616 corp: 4532/527Kb lim: 464 exec/s: 75 rss: 630Mb L: 433/451 MS: 3 ShuffleBytes-InsertByte-CopyPart-
#78003 NEW cov: 8086 ft: 51629 corp: 4533/528Kb lim: 464 exec/s: 75 rss: 630Mb L: 434/451 MS: 5 InsertRepeatedBytes-PersAutoDict-CopyPart-PersAutoDict-CMP- DE: "\001SF8T\271\021W\246"-"\005\025\001"-"\022\000"-
#78302 NEW cov: 8086 ft: 51633 corp: 4534/528Kb lim: 464 exec/s: 75 rss: 630Mb L: 390/451 MS: 4 CrossOver-CopyPart-CopyPart-InsertByte-
#78869 NEW cov: 8086 ft: 51637 corp: 4535/529Kb lim: 464 exec/s: 75 rss: 630Mb L: 306/451 MS: 2 CMP-PersAutoDict- DE: "\002\025\003"-"\000\000\000\235"-
#78962 NEW cov: 8086 ft: 51638 corp: 4536/529Kb lim: 464 exec/s: 75 rss: 630Mb L: 447/451 MS: 3 ChangeBit-InsertRepeatedBytes-ChangeBinInt-
#79268 NEW cov: 8086 ft: 51639 corp: 4537/529Kb lim: 464 exec/s: 75 rss: 630Mb L: 383/451 MS: 1 CMP- DE: "\001\000\000\000\000\000\000\330"-
#79539 NEW cov: 8086 ft: 51643 corp: 4538/530Kb lim: 464 exec/s: 75 rss: 630Mb L: 426/451 MS: 1 CopyPart-
#79641 REDUCE cov: 8086 ft: 51643 corp: 4538/530Kb lim: 464 exec/s: 75 rss: 630Mb L: 57/451 MS: 2 PersAutoDict-EraseBytes- DE: "\377\377\377\377\377\377\377\377"-
#79654 REDUCE cov: 8086 ft: 51643 corp: 4538/530Kb lim: 464 exec/s: 75 rss: 630Mb L: 215/451 MS: 3 CopyPart-CMP-EraseBytes- DE: "\001\000\000\000\000\000\000\000"-
#79810 NEW cov: 8086 ft: 51645 corp: 4539/530Kb lim: 464 exec/s: 75 rss: 630Mb L: 246/451 MS: 1 ShuffleBytes-
#79879 NEW cov: 8086 ft: 51646 corp: 4540/530Kb lim: 464 exec/s: 75 rss: 630Mb L: 460/460 MS: 4 PersAutoDict-CopyPart-ChangeBinInt-PersAutoDict- DE: "\002\025\003"-"\377\377\377\377\377\377\377\016"-
#80023 REDUCE cov: 8086 ft: 51646 corp: 4540/530Kb lim: 464 exec/s: 75 rss: 630Mb L: 331/460 MS: 4 CrossOver-InsertRepeatedBytes-ShuffleBytes-EraseBytes-
#80420 REDUCE cov: 8086 ft: 51646 corp: 4540/530Kb lim: 464 exec/s: 75 rss: 630Mb L: 137/460 MS: 2 ChangeBit-EraseBytes-
#80737 NEW cov: 8086 ft: 51647 corp: 4541/531Kb lim: 464 exec/s: 75 rss: 630Mb L: 438/460 MS: 2 ShuffleBytes-CopyPart-
#80750 REDUCE cov: 8086 ft: 51647 corp: 4541/531Kb lim: 464 exec/s: 75 rss: 630Mb L: 97/460 MS: 3 InsertRepeatedBytes-PersAutoDict-CrossOver- DE: "\002\025\003"-
#81027 NEW cov: 8087 ft: 51648 corp: 4542/531Kb lim: 464 exec/s: 75 rss: 630Mb L: 424/460 MS: 2 ChangeBit-PersAutoDict- DE: "\005\000\000\000\000\000\000\000"-
#81141 NEW cov: 8088 ft: 51649 corp: 4543/532Kb lim: 464 exec/s: 75 rss: 630Mb L: 408/460 MS: 4 CopyPart-ChangeBinInt-InsertRepeatedBytes-EraseBytes-
#81342 NEW cov: 8088 ft: 51650 corp: 4544/532Kb lim: 464 exec/s: 75 rss: 630Mb L: 440/460 MS: 1 CopyPart-
#81469 REDUCE cov: 8088 ft: 51650 corp: 4544/532Kb lim: 464 exec/s: 75 rss: 630Mb L: 98/460 MS: 2 ChangeBit-EraseBytes-
#82191 REDUCE cov: 8088 ft: 51650 corp: 4544/532Kb lim: 464 exec/s: 75 rss: 630Mb L: 180/460 MS: 2 EraseBytes-ChangeBit-
#82833 NEW cov: 8088 ft: 51651 corp: 4545/532Kb lim: 464 exec/s: 75 rss: 630Mb L: 288/460 MS: 2 CopyPart-ChangeBit-
#83064 NEW cov: 8088 ft: 51652 corp: 4546/533Kb lim: 464 exec/s: 75 rss: 630Mb L: 290/460 MS: 1 PersAutoDict- DE: "\001\000\000\000\000\000\000\000"-
#83356 NEW cov: 8088 ft: 51660 corp: 4547/533Kb lim: 464 exec/s: 74 rss: 630Mb L: 368/460 MS: 2 PersAutoDict-CrossOver- DE: "\000\000\000\235"-
thread '<unnamed>' (3398) panicked at fuzz_targets/ops_sequence.rs:204:9:
ops_sequence: Case failed: step 3: copy failed
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==3398== ERROR: libFuzzer: deadly signal
#0 0x556f81aa84b1 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x3fd4b1) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#1 0x556f81fc0e7d (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x915e7d) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#2 0x556f81f73679 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8c8679) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#3 0x7f23e3c4532f (/lib/x86_64-linux-gnu/libc.so.6+0x4532f) (BuildId: a4a7992a8e66555c8141ab2a08a8465ff6e0ea65)
#4 0x7f23e3c9ec0b (/lib/x86_64-linux-gnu/libc.so.6+0x9ec0b) (BuildId: a4a7992a8e66555c8141ab2a08a8465ff6e0ea65)
#5 0x7f23e3c4527d (/lib/x86_64-linux-gnu/libc.so.6+0x4527d) (BuildId: a4a7992a8e66555c8141ab2a08a8465ff6e0ea65)
#6 0x7f23e3c288fe (/lib/x86_64-linux-gnu/libc.so.6+0x288fe) (BuildId: a4a7992a8e66555c8141ab2a08a8465ff6e0ea65)
#7 0x556f81fedb59 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x942b59) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#8 0x556f81febcb8 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x940cb8) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#9 0x556f81f6be14 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8c0e14) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#10 0x556f81febf41 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x940f41) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#11 0x556f81fd7e31 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x92ce31) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#12 0x556f81fd1bf8 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x926bf8) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#13 0x556f81fd869c (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x92d69c) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#14 0x556f820046eb (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x9596eb) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#15 0x556f81b1cb24 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x471b24) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#16 0x556f81b2bd82 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x480d82) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#17 0x556f81f6b9d8 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8c09d8) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#18 0x556f81f6c448 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8c1448) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#19 0x556f81f6b12d (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8c012d) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#20 0x556f81f73bd8 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8c8bd8) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#21 0x556f81f7b259 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8d0259) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#22 0x556f81f7c36a (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8d136a) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#23 0x556f81f7d2d7 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8d22d7) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#24 0x556f81fa0817 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8f5817) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#25 0x556f81f6c476 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x8c1476) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
#26 0x7f23e3c2a1c9 (/lib/x86_64-linux-gnu/libc.so.6+0x2a1c9) (BuildId: a4a7992a8e66555c8141ab2a08a8465ff6e0ea65)
#27 0x7f23e3c2a28a (/lib/x86_64-linux-gnu/libc.so.6+0x2a28a) (BuildId: a4a7992a8e66555c8141ab2a08a8465ff6e0ea65)
#28 0x556f81a09424 (/home/runner/work/minigraf/minigraf/fuzz/target/x86_64-unknown-linux-gnu/release/ops_sequence+0x35e424) (BuildId: e09e5178313073d634f2952cd77617c57431b870)
NOTE: libFuzzer has rudimentary signal handlers.
Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
MS: 2 InsertRepeatedBytes-ChangeBit-; base unit: 4b864f895e2a3ec66bd00d1323eff0af8dcc1cd2
0x2,0x5d,0x7a,0xdd,0xff,0xff,0xff,0x6f,0x0,0xff,0xff,0xff,0x57,0xb0,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xb5,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0xf,0x8f,0x4e,0xb7,0x88,0x71,
\002]z\335\377\377\377o\000\377\377\377W\260\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\265\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017aaaaaaaaaaaaaaaaaaa\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\017\217N\267\210q
artifact_prefix='/home/runner/work/minigraf/minigraf/fuzz/artifacts/ops_sequence/'; Test unit written to /home/runner/work/minigraf/minigraf/fuzz/artifacts/ops_sequence/crash-d9445a783858a0ac727200e8e6b408949ea412c2
Base64: Al163f///28A////V7APDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PtQ8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PD2FhYWFhYWFhYWFhYWFhYWFhYWEPDw8PDw8PDw8PDw8PDw8PDw8PDw8PDw8PD49Ot4hx
────────────────────────────────────────────────────────────────────────────────
Failing input:
fuzz/artifacts/ops_sequence/crash-d9445a783858a0ac727200e8e6b408949ea412c2
Output of `std::fmt::Debug`:
[2, 93, 122, 221, 255, 255, 255, 111, 0, 255, 255, 255, 87, 176, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 181, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 97, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 143, 78, 183, 136, 113]
Reproduce with:
cargo fuzz run -O ops_sequence fuzz/artifacts/ops_sequence/crash-d9445a783858a0ac727200e8e6b408949ea412c2
Minimize test case with:
cargo fuzz tmin -O ops_sequence fuzz/artifacts/ops_sequence/crash-d9445a783858a0ac727200e8e6b408949ea412c2
────────────────────────────────────────────────────────────────────────────────
Error: Fuzz target exited with exit status: 77
Activity
adityamukho commentedon Oct 13, 2026
Not reproducible: the saved input (one transact, then eight
Crashsteps) passes alone and in 5,000 repeats, with no fd or temp-dir leak while fuzzing. Most likely an interrupted syscall: libFuzzer's-timeoutalarm fires every 31 s withoutSA_RESTART, and the old message dropped theio::Error. #567 retriesInterruptedincrash_copyand reports the file and error kind, and adds the input as a test and a corpus seed. Closing after #567 is merged and a v3 nightly is clean.🤖 Generated with Claude Code
Merge pull request #567 from project-minigraf/fix/564-ops-sequence-copy
adityamukho commentedon Oct 13, 2026
#567 merged into
v3(1d9e0c1). Started a manual v3 fuzz run onv3at e117dd6, 3300 s per target: https://github.com/project-minigraf/minigraf/actions/runs/38356104549. Closing if it's clean.🤖 Generated with Claude Code
adityamukho commentedon Oct 13, 2026
Manual v3 fuzz run 38356104549 is clean: all 8 targets passed at 3300 s each, ops_sequence included (
v3at e117dd6, with #567). Closing.🤖 Generated with Claude Code